nodev-ai[.]entrance-cryptolist[.]com

The domain nodev-ai.entrance-cryptolist.com is currently flagged as a generic phishing infrastructure. Registration records show the domain was created on 17 June 2024 through Key-Systems GmbH, and the authoritative name servers are daisy.ns.cloudflare.com and sri.ns.cloudflare.com, indicating use of Cloudflare DNS services. DNS resolution points to the IPv4 address 188.114.96.3, an IP frequently observed in malicious hosting clusters.

The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy sinkhole, confirming that at least one anti‑phishing feed has identified it as abusive. VirusTotal scans have returned detections from 17 of 91 security vendors, providing independent confirmation of malicious intent. No additional public intelligence such as Safe Browsing, OTX, or SSL certificate details are presently available, leaving the exact content of the hosted site unverified.

The lack of a page title or content analysis means the specific lure or credential‑stealing technique cannot be described, but the aggregate evidence—recent registration, Cloudflare name servers, malicious IP, blocklist inclusion, and multi‑vendor detections—justifies an elevated risk rating. Defenders should block the domain at network perimeters, add the IP address 188.114.96.3 to deny lists, and monitor DNS queries for the associated Cloudflare name servers. Continuous re‑scanning with VirusTotal or similar services is recommended to capture any changes in the detection landscape, and any observed credential submission to the domain should be treated as compromised.