dogemars[.]entrance-cryptolist[.]com

This domain was flagged as a credential‑harvesting site on 29 July 2026. The hostname dogemars.entrance-cryptolist.com was registered through Key‑Systems GmbH on 17 June 2024 and currently resolves to the IPv4 address 188.114.96.3. Cloudflare authoritative nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com serve the domain, indicating the use of a third‑party CDN for traffic handling. The domain appears on one public blocklist and is actively blocked by the PhishDestroy filtering service.

VirusTotal has recorded 14 positive detections out of 91 scanning engines, confirming a consensus among multiple security vendors that the domain is malicious. No additional public intelligence such as Safe Browsing status, OTX references, SSL certificate details, or page‑title metadata has been disclosed, leaving the exact content and lure vector unverified. The observed infrastructure suggests a low‑cost hosting arrangement, common for short‑lived phishing campaigns. Defenders should immediately add dogemars.entrance-cryptolist.com to DNS and proxy blocklists, deny outbound connections to its resolved IP address 188.114.96.3, and monitor for newly created domains using the same registrar or similar naming patterns.

Continuous re‑scanning of the host on VirusTotal and periodic checks of its DNS records are recommended to detect any changes in hosting or detection scores. Network‑level controls that enforce TLS inspection may also reveal subsequent payloads if the site begins serving HTTPS. In the absence of further artefacts, the domain remains an active threat that warrants proactive containment.