shiro-pet[.]entry-cryptolist[.]app

Analysis on July 29 2026 indicates that the domain shiro-pet.entry-cryptolist.app is actively used for phishing. The domain resolves to the IPv4 address 188.114.96.3 and its authoritative name servers could not be retrieved, suggesting that the registrar may have removed or hidden the NS records. VirusTotal has recorded 16 detections out of 91 scanned security vendors, confirming that multiple independent scanners consider the host malicious.

The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy mitigation service, reinforcing its classification as a phishing infrastructure. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or brand targeting is presently available, leaving the exact lure and victim profile undefined. The lack of further public metadata limits attribution of the hosting provider or the underlying campaign toolkit.

Defenders should block outbound connections to 188.114.96.3, add shiro-pet.entry-cryptolist.app to DNS sinkhole or firewall deny lists, and monitor for any email or web traffic referencing the domain. Continuous re‑scanning on VirusTotal and inclusion in internal threat intel feeds is recommended to capture any changes in detection count or new indicator updates.