uptop[.]entry-cryptolist[.]app

The domain uptop.entry-cryptolist.app is currently active and classified as a generic phishing threat with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IPv4 address 188.114.96.3. No authoritative nameserver records are returned, indicating that standard DNS delegation is missing or deliberately concealed.

VirusTotal has recorded detections from 12 of 91 security vendors, confirming that a subset of scanning engines consider the domain malicious. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, suggesting that at least one commercial anti‑phishing platform has observed malicious use. No additional intelligence such as page title, SSL certificate details, HTTP response codes, registrar information, or attribution from open threat exchanges (OTX, etc.) is available at this time, leaving the exact payload or credential‑harvesting method undocumented.

Defenders should prioritize immediate containment by adding uptop.entry-cryptolist.app to DNS‑based blocklists and firewall rules, and consider blocking the associated IP address 188.114.96.3 to disrupt any ongoing command‑and‑control or data‑exfiltration pathways. Continuous monitoring of DNS queries for this domain and related subdomains is advised, as well as periodic re‑scans to capture any changes in detection status. Organizations employing email filtering should ensure that messages containing links to this domain are quarantined, and users should be educated to avoid clicking unknown links, especially those that reference cryptocurrency‑related services, given the domain’s affiliation with the entry‑cryptolist namespace.