pom[.]gate-cryptolist[.]com

Analysis of pom.gate-cryptolist.com shows a clear malicious profile consistent with a generic phishing operation. The domain was registered through Key-Systems GmbH and created on June 17, 2024. DNS resolution points to the single IPv4 address 188.114.96.3, and the authoritative nameservers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure. Reputation data confirms that the domain appears on one security blocklist and has been listed by the PhishDestroy filtering service, reinforcing its classification as a phishing vector.

VirusTotal scans reveal that 14 out of 91 security vendors have flagged the domain as malicious, providing independent corroboration of its hostile intent. No additional public intelligence such as page titles, SSL certificates, or HTTP response codes is available at this time, leaving the specific content and lure mechanisms unverified. The presence of multiple detection sources, the confirmed blocklist entries, and the Cloudflare hosting footprint suggest a deliberately crafted infrastructure designed to evade simple takedown attempts.

Defenders should prioritize adding pom.gate-cryptolist.com to network and endpoint blocklists, enforce DNS sinkholing for the resolved IP 188.114.96.3, and monitor for related sub‑domains that may share the same nameserver configuration. Continuous re‑scanning of the domain via VirusTotal or similar multi‑engine platforms is recommended to capture any evolution in payload or additional vendor detections. Organizations employing URL filtering or secure web gateways should ensure the domain is explicitly denied to prevent user exposure.