heroes-ai[.]entry-cryptolist[.]app

The domain heroes-ai.entry-cryptolist.app is currently flagged as a generic phishing site. Detection services have identified the domain on 14 of 91 VirusTotal scanners, indicating a moderate consensus among security vendors that the site hosts malicious content. The domain is actively blocked by the PhishDestroy sinkhole, confirming that at least one anti‑phishing network has taken containment action.

DNS resolution points to the IPv4 address 188.114.97.3; no alternative A or AAAA records were observed, and the authoritative nameserver information could not be retrieved, suggesting either a misconfigured zone or deliberate omission of NS records. The domain appears on a single public blocklist, reinforcing the view that it is recognized by at least one external threat‑intelligence source. No SSL/TLS certificate details, HTTP response codes, or page‑title metadata have been disclosed, so the surface‑level web infrastructure cannot be fully profiled at this time.

Likewise, Safe Browsing, OTX, registrar, ASN, and country data are absent from the current intelligence set, leaving those attributes uncertain. Defenders should continue to block the domain at the network perimeter, update DNS filtering rules to include the associated IP address, and monitor for any new indicators such as additional blocklist listings or changes in VirusTotal detection ratios. Ongoing observation of the IP host for other malicious domains is advised, as shared hosting environments can be leveraged for multiple campaigns.