abster[.]entry-cryptolist[.]app

PhishDestroy identifies abster.entry-cryptolist.app as a generic phishing domain currently under investigation for hosting a crypto wallet drainer kit. The domain mimics legitimate cryptocurrency service entry points to trick users into connecting wallets and draining funds. No specific brand is being impersonated in currently observed artifacts; instead the page relies on generic “crypto entry” lures. The drainer kit appears to be a recently updated variant that automates wallet connection prompts and transaction signing without user scrutiny. abster.entry-cryptolist.app resolves to IP 188.114.96.3 and is served via a Google Trust Services SSL certificate. VirusTotal shows 0 detections out of 95 engines as of seed 8c688c, indicating the domain has evaded most scanners to date. WHOIS records place the domain under registrar Namecheap Inc., with creation occurring within the last 90 days; Google Safe Browsing has not yet flagged the URL and public blocklist aggregators report zero listings at this time. The domain remains active with a live drainer page, and PhishDestroy has escalated this indicator to tier-2 threat hunting queues for takedown requests. Until takedown succeeds, the residual risk is high for cryptocurrency users who may encounter the lure via social media or phishing emails; users are advised to block 188.114.96.3 at the network perimeter and avoid connecting wallets to any entry-cryptolist.app subdomains.