pois-cto[.]com

The domain pois-cto.com was registered on 25 September 2025 through Tucows Domains Inc. and is currently reported as taken offline. Infrastructure analysis shows the domain resolves to the IPv4 address 85.206.242.208, which belongs to AS61272 Informacines sistemos ir technologijos, UAB in Lithuania. The authoritative name servers listed are dns1.bacloud.com, dns1.laisvas.lt, dns2.bacloud.com, dns2.laisvas.lt and dns2laisvas.lt, indicating a multi‑provider DNS setup. No TLS certificate is presented for the site, meaning HTTPS connections are not supported.

The page title observed when the site was reachable was "Naked Crab Man by Matt Furie," a content element unrelated to the claimed target brand. The site is classified as a brand‑impersonation scam targeting Revolut, and the Gridinsoft trust score is recorded as 0 out of 100, reflecting a very low trust rating. The domain appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. VirusTotal analysis reports that two of ninety‑five security vendors flagged the domain, providing limited but corroborating evidence of malicious intent.

While the exact phishing payload or credential‑capture mechanism has not been disclosed, the combination of a low trust score, blocklist listings, absence of SSL, and the mismatched page title suggest a deliberately crafted impersonation effort. Defenders should continue to monitor the domain for any re‑appearance, enforce blocking at network perimeter and DNS filtering layers, and include the domain hash in threat‑intel feeds. Incident response teams should also verify any recent user traffic to this domain and advise users to avoid any unsolicited communications purporting to originate from Revolut that reference the observed domain.