pzb[.]cc

Analysis indicates that the domain pzb.cc was registered on August 31, 2013 and remains active as of July 12, 2026. The site is classified as a generic_phishing threat with a high risk rating. Current open‑source intelligence confirms the presence of a page title "pzb.cc/index/index/home" and an HTTP 200 response, suggesting the infrastructure is fully operational.

Infrastructure examination reveals that pzb.cc resolves to the IP address 172.67.210.139, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served through Cloudflare's edge network, employing HSTS, HTTP/3, and Cloudflare Browser Insights, and is secured by a Google Trust Services certificate (WE1). Nameserver delegation points to christina.ns.cloudflare.com and kyle.ns.cloudflare.com. The front‑end stack includes Bootstrap, Zepto, Marked, and jQuery, confirming a modern web‑application framework.

Detection confidence is reinforced by multiple security signals. VirusTotal reports that 15 out of 95 scanning engines have flagged the domain, and it appears on one known security blocklist. The site has been blocked by PhishDestroy and receives a Gridinsoft trust score of 1 out of 100, underscoring its malicious intent. These indicators collectively validate the high‑risk assessment despite the lack of publicly disclosed payload details.

Defenders should prioritize containment of this indicator of compromise. Immediate actions include adding pzb.cc and its resolving IP 172.67.210.139 to network blocklists and configuring DNS sinkholes to intercept resolution attempts. Monitoring for additional domains hosted on the same Cloudflare nameservers or sharing the identified technology stack can help uncover related campaigns. Security appliances should be updated with signatures reflecting the observed user‑agent and TLS fingerprint patterns, and outbound traffic to the identified IP should be scrutinized for anomalous data exfiltration.