poloniexzone[.]cc

Analysis of poloniexzone.cc, created on February 21, 2026, shows that the domain is currently offline and has been taken down. The authoritative name servers are aria.ns.cloudflare.com and arturo.ns.cloudflare.com, indicating use of Cloudflare's DNS service. The domain resolves to the IP address 172.67.173.111, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No SSL certificate was observed, meaning the site did not present a valid TLS handshake before being withdrawn.

The registrar listed for the registration is Gname.com Pte. Ltd., a bulk registration service often leveraged by malicious operators. Security assessments reveal a Gridinsoft trust score of 0 out of 100, signifying extreme risk. VirusTotal data records 15 of 93 scanning engines flagging the domain as malicious, reinforcing the suspicion of phishing behavior. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy mitigation platform.

Although the exact phishing content, page title, or targeted brand were not captured, the combination of low trust score, multiple vendor detections, and rapid takedown suggests a purposeful phishing campaign. Defenders should maintain the domain in network blocklists, monitor for any re‑registration or IP reuse, and consider sinkholing the associated Cloudflare IP to prevent future abuse. Continuous watch‑listing of the registrar and the observed name servers is advised, as they may host additional malicious domains.