pectra-giraffe[.]entrance-cryptolist[.]com

Analysis indicates that the domain pectra-giraffe.entrance-cryptolist.com was registered on 17 June 2024 through Key-Systems GmbH and resolves to the IP address 188.114.97.3. The authoritative name servers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, both operated by Cloudflare, a service frequently abused to hide malicious infrastructure. VirusTotal records show that 17 of 91 scanned security vendors flag the domain as malicious, providing vendor‑level corroboration of its threat status. The domain appears on one security blocklist and is actively blocked by the PhishDestroy filtering service.

Historical HTTP probing returned a 200 OK response, indicating that a web service was live before the domain was taken offline. No page title, SSL certificate data, or Safe Browsing verdicts are present in the current intelligence, leaving the exact content and visual lure of the site unverified. The classification as a generic phishing campaign aligns with the threat type field and the observed detection activity.

Because the site is currently offline, the specific phishing payload and targeted brand remain unknown. Defenders should maintain blocks for the domain at perimeter firewalls, proxy filters, and DNS resolvers, and incorporate the associated IP address and Cloudflare name servers into threat‑intel feeds. Continuous monitoring for re‑activation of the domain or emergence of related sub‑domains is advised, and any suspicious connections observed should be treated as malicious and subjected to containment procedures.