sui-rwa[.]entrance-cryptolist[.]com

The domain sui-rwa.entrance-cryptolist.com was registered on June 17, 2024 through Key-Systems GmbH. Its authoritative name servers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. DNS resolution points to the IPv4 address 188.114.96.3, a host commonly associated with shared hosting environments. VirusTotal has recorded 17 of 91 security vendors flagging the domain as malicious, confirming a consensus of detection across multiple scanners.

The domain is listed on one public blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing its classification as a phishing infrastructure. The current threat rating is elevated and the domain remains active in threat intel feeds. Evidence from the available intelligence does not include SSL certificate details, HTTP response codes, page title, or any observed payload. Consequently, the precise phishing vector or targeted brand cannot be confirmed at this time.

Analysts should treat the domain as a confirmed phishing source and enforce network‑level deny rules for the resolved IP address and associated hostnames. Security appliances should be updated to include the domain in URL filtering lists, and incident response teams should monitor for any inbound traffic or email links referencing the domain. Continuous re‑evaluation is advised should additional artifacts such as page content or malware samples become available.