global-entertainment-token[.]gate-cryptolist[.]com

global-entertainment-token.gate-cryptolist.com is currently classified as a generic phishing infrastructure with an elevated risk rating. The domain was registered through Key-Systems GmbH and the WHOIS creation timestamp is 17 June 2024. DNS resolution points to the single IPv4 address 188.114.96.3, and the authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. Threat intelligence feeds have placed the domain on one security blocklist, and the anti‑phishing solution PhishDestroy also lists it as blocked.

VirusTotal analysis shows that 14 of 91 scanned security vendors flag the domain as malicious, providing a modest but notable consensus of detection. The domain appears in no other publicly disclosed reputation services beyond the single blocklist entry. The available data confirms that the domain is actively being used for phishing, yet the exact payload, targeted brand, or phishing page content has not been publicly released. Consequently, the precise lure, credential‑harvesting technique, and any associated command‑and‑control endpoints remain unknown.

Defenders should prioritize blocking network traffic to 188.114.96.3 and to the Cloudflare name servers listed, enforce URL filtering for the full domain string, and monitor for outbound connections that may indicate successful credential exfiltration. Continuous re‑scanning on VirusTotal and inclusion in internal threat‑intel feeds are recommended to capture any future changes in detection scores. Organizations with users who may receive unsolicited communications referencing entertainment tokens or crypto‑related offers should be warned to verify URLs before entering credentials. The elevated risk level and active status justify immediate remediation actions and ongoing observation.