challengezones[.]pro

This domain, challengezones.pro, has been identified as a brand impersonation phishing site targeting Celer, a blockchain-based gaming and esports platform. The domain is currently offline, though prior analysis confirms its use in credential theft campaigns designed to mimic legitimate Celer services. The infrastructure was operational until recently, presenting itself as an eSports and gaming community portal under the page title 'Global | eSports and Gaming Community.' Analysis of the domain reveals multiple technical indicators of malicious activity. The domain was created on February 21, 2026, and resolved to the IPv6 address 2606:4700:3031::6815:dd0, hosted on Cloudflare’s network (AS13335). Security vendors flagged the domain, with 18 out of 95 VirusTotal engines detecting it as malicious. The domain appears on two security blocklists and has been explicitly blocked by PhishDestroy and PhishingDB. The SSL certificate, issued under the identifier WE1, further aligns with patterns observed in phishing infrastructure leveraging Cloudflare’s services to obscure hosting origins. The current status of challengezones.pro is offline, though the risk of reemergence remains elevated given the domain’s recent creation date and established impersonation tactics. Organizations and users are advised to monitor for renewed activity under this domain or similar variants. Network defenders should implement DNS-based blocking for challengezones.pro and its associated IP address, while end-users should verify the authenticity of any Celer-related communications or websites before entering credentials. Given the domain’s association with gaming and esports, targeted sectors should prioritize user education on recognizing brand impersonation attempts in these verticals.