helio-2[.]entry-cryptolist[.]app

This domain, helio-2.entry-cryptolist.app, is flagged as an active phishing site with elevated risk as of July 29, 2026. Analysis reveals the domain is detected by 13 of 91 security vendors on VirusTotal, indicating a confirmed malicious classification by multiple engines. It appears on at least one security blocklist and is currently blocked by PhishDestroy.

Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, though no nameserver (NS) records were found, which may suggest recent takedown attempts or misconfigured DNS settings. The absence of nameservers does not prevent resolution but may indicate instability or evasion tactics. The domain's association with 'entry-cryptolist' in its subdomain suggests a potential focus on cryptocurrency-related phishing, though the exact content or targeted brand remains unconfirmed due to lack of page title or brand-specific evidence in available data.

Defenders should treat this domain as hostile and prioritize blocking it at the DNS and network level. Security teams are advised to monitor for connections to 188.114.96.3 and correlate logs for potential compromise indicators. Additional analysis of the site's content is recommended to determine the specific phishing kit or campaign, though no evidence of a known kit is currently present in the data.