pollo[.]entrance-cryptolist[.]com

The domain pollo.entrance-cryptolist.com is currently classified as an elevated-risk phishing threat based on multiple corroborating data points. It was registered on June 17, 2024, through Key-Systems GmbH and is presently active. The domain resolves to IP address 188.114.96.3 and uses Cloudflare nameservers (daisy.ns.cloudflare.com and sri.ns.cloudflare.com), indicating a common setup for both legitimate and malicious operations, but not serving as an indicator of trust or risk by itself.

This domain has been blocked by PhishDestroy and is present on at least one public security blocklist, evidencing its recognition by the security community as malicious. Further, analysis through VirusTotal shows that 14 out of 91 security vendors have flagged this domain, which is a significant detection ratio and strongly suggests a consensus of malicious activity. No additional details regarding the specific phishing tactic, targeted brands, or the site's content are available at this time, as there is no evidence from page titles or site analysis in the provided intelligence.

Given the above, defenders should treat any traffic to or from this domain as suspect and consider immediate blocking at the network and endpoint level. Monitoring for related domains with similar naming conventions or infrastructure is also advised. As the domain remains active as of July 29, 2026, ongoing vigilance is necessary, and further analysis may be warranted if additional indicators or contextual information becomes available.