xna[.]entrance-cryptolist[.]com

Analysis indicates that the domain xna.entrance-cryptolist.com was registered on June 17 2024 through Key-Systems GmbH and is currently active. DNS resolution points to the IPv4 address 188.114.97.3, hosted on Cloudflare nameservers daisy.ns.cloudflare.com and sri.ns.cloudflare.com. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming its classification as a phishing vector.

VirusTotal reports that 16 of 91 scanning engines have flagged the domain, reinforcing the malicious assessment. No additional public intelligence such as SSL certificate details, HTTP response codes, or page title information is presently available, limiting deeper content analysis. The lack of further context suggests that the malicious activity may rely on credential‑stealing pages or redirects, typical of generic phishing campaigns.

Defenders should enforce network‑level deny rules for the domain and its resolved IP address, incorporate the domain into existing URL filtering and email gateway blocklists, and monitor for any related traffic to Cloudflare’s nameservers. Continuous re‑evaluation is recommended, as additional detections or threat‑intel feeds may surface further indicators of compromise. The elevated risk rating reflects the combination of recent registration, active blocklist status, and multi‑vendor detection, warranting prompt mitigation.