udex[.]entrance-cryptolist[.]com

Analysis of udex.entrance-cryptolist.com indicates that the domain was registered on June 17, 2024 through Key-Systems GmbH and is currently hosted on the IP address 188.114.96.3. The authoritative name servers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, confirming that the domain is serviced by Cloudflare’s DNS infrastructure. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy service, reflecting its identification as a malicious resource.

VirusTotal scans show that 17 out of 91 security vendors have flagged the domain as suspicious, providing independent corroboration of its risk profile. No additional intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is available at this time, so the specific content or lure employed by the site cannot be confirmed. Given the limited but consistent evidence—registration date, hosting details, blocklist presence, and multi‑vendor detections—defenders should treat udex.entrance-cryptolist.com as an active generic phishing threat.

Recommended mitigations include adding the domain to DNS and proxy blocklists, monitoring outbound connections to 188.114.96.3, and applying alerting rules for any traffic that attempts to resolve or contact the domain. Continuous re‑evaluation is advised as new indicators (e.g., page content, SSL fingerprints, or additional vendor detections) may emerge and refine the threat posture.