schizo-terminal[.]entrance-cryptolist[.]com

The domain schizo-terminal.entrance-cryptolist.com was registered through Key-Systems GmbH on 17 June 2024 and is currently delegated to the Cloudflare authoritative nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.96.3, which is hosted on the Cloudflare network. The domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one mitigation platform has identified it as malicious. VirusTotal scans have returned 17 positive detections out of 91 submitted security vendors, confirming that a non‑trivial subset of AV engines consider the domain to be associated with phishing‑related activity. The threat classification supplied is generic phishing, and the risk level is elevated while the operational status is listed as active.

No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, Open Threat Exchange indicators, or page title information is available in the current dataset. Consequently, the precise landing page content, credential‑collection mechanisms, and any potential brand impersonation remain unverified. The lack of public-facing metadata limits the ability to attribute a specific phishing kit or to confirm whether the site is currently serving malicious payloads. Defenders should prioritize immediate containment actions. The domain should be added to DNS‑based blocklists and firewall deny rules, and the associated IP address 188.114.96.3 should be monitored for anomalous traffic patterns.

Continuous re‑scanning with VirusTotal or comparable multi‑engine services is advised to capture any changes in detection rates. Organizations employing email or web gateway protections should ensure that the domain is flagged within their URL filtering policies.