The domain bearonpole.com was registered on July 23, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on Cloudflare infrastructure, using the authoritative name servers kip.ns.cloudflare.com and meera.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is associated with a Cloudflare edge node. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy service, indicating that threat‑intel feeds have identified it as malicious.
VirusTotal analysis shows that 2 of 91 scanned security vendors flagged the domain, providing additional corroboration of its malicious nature. No public evidence was found regarding the site’s SSL certificate, HTTP response status, Safe Browsing rating, Open Threat Exchange (OTX) listings, or page title; consequently, the exact content and visual characteristics of the site remain unverified. The limited detection footprint—only two vendor detections and a single blocklist entry—suggests that the campaign may be in an early deployment stage or employing evasion techniques to limit exposure.
Defenders should treat bearonpole.com as a high‑risk indicator. Immediate actions include adding the domain and its resolving IP (188.114.97.3) to DNS and proxy blocklists, monitoring for any new resolution changes, and correlating internal logs for traffic to the domain. Continuous re‑evaluation is advised, as additional detections or threat‑intel updates may expand the observed footprint and clarify the phishing payload or targeted brand.