memeless-coin[.]entrance-cryptolist[.]com

Analysis of memeless-coin.entrance-cryptolist.com shows an active infrastructure that aligns with a generic credential harvesting campaign. The domain was registered through Key-Systems GmbH and first observed on June 17, 2024. DNS resolution points to the IPv4 address 188.114.96.3, and the authoritative name servers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, indicating use of Cloudflare's DNS service.

VirusTotal reports that 14 of 91 security vendors have flagged the domain, suggesting a moderate level of detection across commercial scanners. The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as malicious. No additional intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is currently available, leaving the exact content and lure mechanisms unverified.

Defenders should prioritize immediate network-level blocking of the domain and its resolved IP address, enforce DNS sinkholing for the associated Cloudflare name servers, and incorporate the domain into intrusion detection signatures. Continuous monitoring of the IP 188.114.96.3 for new host activity is advised, as is periodic re‑query of VirusTotal and other reputation services to capture any changes in vendor detection rates. Given the elevated risk rating, organizations handling credential data should treat any traffic to this host as suspicious and trigger incident response procedures if authentication attempts are observed.