pilcoeolzo[.]com

Analysis of pilcoeolzo.com indicates that the domain was registered on February 22, 2026 through NiceNIC International Group Co., Limited and subsequently used for a generic phishing operation. The site was hosted on Cloudflare infrastructure (AS13335) and resolved to the IP address 188.114.96.3, which is geolocated to the United States. No TLS certificate was observed, and the HTTP response returned a page titled "Just a moment..." before the domain was taken offline.

The domain appears on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal scanned the domain and recorded three positive detections out of ninety‑five submitted security engines, confirming that multiple vendors identified malicious characteristics. The nameservers listed are brynne.ns.cloudflare.com and guy.ns.cloudflare.com, both standard Cloudflare delegations.

While the exact phishing payload or target brand has not been disclosed, the available indicators—including registration date, hosting details, blocklist presence, and vendor detections—align with a recently deployed phishing campaign. Defenders should continue to enforce blocklist rules that include pilcoeolzo.com, monitor outbound traffic for connections to 188.114.96.3, and ensure that any user‑initiated requests to the domain are denied. Given the elevated risk rating and the domain’s recent creation, security teams are advised to update internal threat intel feeds, propagate the indicator to endpoint protection solutions, and maintain vigilance for related Cloudflare‑hosted phishing infrastructure that may share similar naming patterns.