poloniexfund[.]cc

The domain poloniexfund.cc is confirmed to be an active phishing site specializing in brand impersonation targeting Sei, a cryptocurrency platform. Analysis indicates the site is designed to deceive users into disclosing sensitive credentials or transferring digital assets to attacker-controlled wallets. The domain currently maintains an elevated risk status due to its verified malicious infrastructure and ongoing operational status. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Dynadot LLC, an unusual future date suggesting potential domain spoofing or registry manipulation. It resolves to IP address 188.114.96.3, hosted on AS13335 Cloudflare, Inc. in the United States. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of legitimacy. Security telemetry shows the domain is flagged by 13 of 95 vendors on VirusTotal and appears on at least one security blocklist, with detection engines specifically identifying it as a phishing threat. The page title 'Titelseite' further suggests localization targeting German-speaking users, though the underlying phishing kit may support multiple languages. Current status indicates the domain remains operational and unremediated, posing an active threat to cryptocurrency users. Organizations and individuals are advised to implement immediate network-level blocking of the domain and associated IP address. Endpoint protection systems should be updated to include this indicator of compromise, and security teams should monitor for connections to 188.114.96.3. Users who may have interacted with this domain should revoke any connected wallet permissions, rotate credentials for all cryptocurrency-related accounts, and verify transaction histories for unauthorized activity. Cryptocurrency exchanges and wallet providers are recommended to preemptively warn users about this specific impersonation campaign.