polxeonpro[.]live

Analysis indicates that the domain polxeonpro.live is currently active and hosts a site titled "polxeonpro | Official Platform for AI Assisted Trading". The page title and the listed scam type "Fake Exchange" suggest the domain is being used to lure victims into a fraudulent trading platform. The domain was registered on 12 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the Cloudflare IP address 188.114.97.3, which is located in the United States and belongs to AS13335. The DNS configuration uses the Cloudflare authoritative nameservers nico.ns.cloudflare.com and veronica.ns.cloudflare.com, providing typical CDN protection and obscuring the true hosting infrastructure. An SSL certificate issued by Google Trust Services (WE1) is present, indicating that HTTPS connections are encrypted but does not mitigate the underlying malicious intent. Threat intelligence sources show the domain appears in four AlienVault OTX pulses and is listed on a single security blocklist; it is also flagged by PhishDestroy. VirusTotal scans have resulted in eight detections out of ninety‑one security vendors, and the Gridinsoft trust score is 0 out of 100, reinforcing the high‑risk assessment. The HTTP response code is 200, confirming that the site is serving content. No additional technical artifacts such as malware payloads or command‑and‑control endpoints have been disclosed, leaving the exact phishing infrastructure and victim acquisition methods unknown. Defenders should block the domain and its associated IP at perimeter defenses, monitor DNS queries for the Cloudflare nameservers, and add the domain to internal blocklists. Continuous re‑evaluation is recommended as further indicators may emerge.