poloniexbtc[.]com

This domain, poloniexbtc.com, was registered on August 18, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The site presented a TLS certificate identified as WE1, indicating the use of a standard SSL issuance. The page title observed during the brief crawl was “Titelseite”, and the domain was classified as a brand‑impersonation campaign targeting the cryptocurrency platform Sei. The infrastructure received a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation.

VirusTotal analysis recorded a single detection out of ninety‑three scanning engines, confirming that at least one vendor identified malicious behavior. The domain currently appears on one public security blocklist and has been taken down by the PhishDestroy takedown service, confirming that the site is offline at the time of this assessment. Evidence indicates that the primary threat vector is brand impersonation, yet the exact page content, login forms, or credential‑harvesting mechanisms have not been captured, leaving the functional details of the scam uncertain. Defenders should immediately block traffic to 188.114.97.3 and add poloniexbtc.com to internal URL filtering rules.

Continuous monitoring of Cloudflare‑associated IP ranges for similar registrations is advised, as the attacker leveraged a reputable CDN provider to hide origin. Organizations using the Sei brand should educate users about the “Titelseite” title and advise verification of legitimate URLs. Since the domain has already been seized by a takedown service, further removal requests to additional blocklists can reinforce its offline status. Ongoing vigilance is recommended because the low trust score and the presence on a blocklist suggest the domain may be part of a broader impersonation campaign.