synthetixpool[.]io

The domain synthetixpool.io was registered through NameSilo, LLC on September 02, 2025 and resolves to the IP address 188.114.97.3, which is hosted on Cloudflare’s AS13335 network in the United States. The domain is served via Cloudflare’s DNS infrastructure (gwen.ns.cloudflare.com and ned.ns.cloudflare.com) and currently presents no TLS certificate, leaving the HTTP connection unencrypted. Public scanning on VirusTotal recorded a single positive detection out of 95 security vendors, indicating at least one scanner identified malicious behavior.

The site was subsequently blocked by the PhishDestroy service and appears on one additional security blocklist, while its Gridinsoft trust score is 0 / 100, reflecting a classification as highly untrustworthy. The page title returned for the site is “Un momento…”, and no further page content has been publicly disclosed; the precise nature of the landing page remains unverified beyond the implied investment‑scam motif. The domain is presently taken offline, but its infrastructure—dedicated Cloudflare IP, lack of SSL, and low trust score—matches patterns observed in recent brand‑impersonation campaigns targeting cryptocurrency platforms.

Defenders should add synthetixpool.io to URL filtering policies, ensure outbound connections to the associated IP are denied, and monitor for any re‑registration or re‑activation of the domain. Continuous observation of the IP address and associated Cloudflare name servers is recommended, as the hosting environment could be reused for future malicious campaigns.