fusaka[.]entrance-cryptolist[.]com

Analysis of fusaka.entrance-cryptolist.com indicates that the domain was registered through Key-Systems GmbH and first appeared on June 17, 2024. The authoritative nameservers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, and the domain resolves to the IP address 188.114.96.3. An HTTP request to the host returns a 200 OK status, suggesting that a web service was active at the time of observation. VirusTotal scans show that 15 of 91 security vendors flagged the domain, demonstrating moderate detection consensus.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. Risk assessment classifies the infrastructure as elevated, and the current operational status is offline, which may indicate takedown or temporary suspension. No public SSL certificate details, page title, or brand impersonation information are available, so the exact content and targeted victim profile remain unknown.

Defenders should continue to block the domain and its associated IP address, monitor Cloudflare name server activity for any re‑registration attempts, and incorporate the domain hash into threat‑intel feeds. Because the site previously returned HTTP 200, any residual redirects or cached content could still be leveraged by attackers, so network‑level filtering and endpoint URL reputation checks are advised. Ongoing observation of the IP 188.114.96.3 for anomalous traffic is recommended, as the host may be reused for future malicious campaigns.