hinagi[.]entrance-cryptolist[.]com

hinagi.entrance-cryptolist.com is an active domain first seen on June 17 2024 and currently resolved to the Cloudflare edge address 188.114.97.3. The domain is delegated to Cloudflare nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com, indicating the infrastructure is behind Cloudflare's CDN and WAF services. Registration was performed through Key-Systems GmbH, a registrar commonly used for both legitimate and malicious registrations.

The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that threat‑intelligence sources have identified it as malicious. VirusTotal analysis shows that 14 of 91 scanning engines have flagged the domain, providing independent corroboration of its malicious nature. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any observed brand targeting, so those aspects remain unverified.

The combination of a recent creation date, Cloudflare‑based hosting, multiple vendor detections, and inclusion on a phishing‑specific blocklist supports an elevated risk rating. Defenders should add hinagi.entrance-cryptolist.com to DNS and proxy blocklists, monitor outbound connections to 188.114.97.3, and consider enforcing stricter email filtering for messages containing this domain or its sub‑domains. Continuous re‑evaluation is advised in case additional indicators, such as payload samples or victim reports, become available.