genie-ai-live[.]entrance-cryptolist[.]com

This domain, genie-ai-live.entrance-cryptolist.com, is flagged as an active phishing endpoint targeting cryptocurrency users. Registered on June 17, 2024, through Key-Systems GmbH, it resolves to IP 188.114.96.3, a Cloudflare-hosted address. As of July 29, 2026, fifteen of ninety-one security vendors on VirusTotal classify the domain as malicious, and it appears on at least one operational blocklist (PhishDestroy). The nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com further link the infrastructure to Cloudflare, a common proxy for phishing campaigns due to its privacy features and ease of deployment.

Analysis indicates the domain name incorporates terms associated with AI and cryptocurrency ('genie-ai-live', 'cryptolist'), suggesting an attempt to deceive users expecting AI-driven crypto services or token listings. No specific brand impersonation or scam subtype (e.g., wallet drainer, exchange phishing) has been confirmed in available data. The exact content and functionality of the site remain unanalyzed; defenders should treat it as a generic crypto-phishing threat until further evidence emerges.

Defenders are advised to block the domain at DNS and proxy levels, monitor for connections to 188.114.96.3, and review logs for references to the Cloudflare nameservers. The elevated risk level is based on detection volume and blocklist inclusion, not on confirmed victim reports or payload analysis. No SSL certificate details or HTTP response data were provided; additional technical indicators may emerge from deeper inspection.