poocoln[.]cc
“www.www.poocoln.cc”
Riepilogo delle prove
Analysis of poocoln.cc reveals a recently established domain flagged for generic phishing activity, currently offline as of July 24, 2026. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolves to IP address 172.67.196.36, hosted by Cloudflare, Inc. in Canada. Infrastructure analysis indicates the use of Cloudflare nameservers (amos.ns.cloudflare.com and tricia.ns.cloudflare.com), a common tactic to obscure hosting origins and leverage Cloudflare’s CDN and security features. The detected page title, 'www.www.poocoln.cc,' suggests either a misconfiguration or deliberate obfuscation, though the exact content and target of the phishing attempt remain unconfirmed due to the domain’s current offline status.
The domain appears on at least one security blocklist, and PhishDestroy has explicitly blocked it. VirusTotal reports a single detection out of 93 security vendors, indicating limited but present awareness within the security community. No additional details regarding the phishing kit, targeted brand, or specific scam type are available in the current intelligence. The use of HTTP/3, a newer protocol, may be an attempt to evade traditional detection mechanisms or improve performance for malicious activities.
Defenders should treat this domain as elevated risk based on its registration recency, Cloudflare hosting, and existing blocklist entries. While the domain is offline, monitoring for reactivation or shifts in infrastructure (e.g., changes in IP or nameservers) is recommended. If encountered in logs or network traffic, this domain should be blocked at the perimeter, and any associated artifacts (e.g., IPs, certificates) should be investigated for further compromise indicators. The lack of widespread detection does not imply safety, and organizations should correlate this domain with other threat intelligence sources for context.
Data Coverage
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo