zerobyte[.]entry-cryptolist[.]app

This domain, zerobyte.entry-cryptolist.app, is actively flagged as a cryptocurrency-related phishing site. Infrastructure analysis reveals it resolves to the IP address 188.114.96.3, which currently lacks associated ASN or geolocation details in available threat intelligence. The domain appears on one security blocklist and is blocked by PhishDestroy, indicating confirmed malicious classification by at least one vendor. VirusTotal detection data shows 16 of 91 security vendors flagging the domain as malicious, providing moderate confidence in its phishing designation.

Nameserver records return NS_NOT_FOUND, suggesting misconfigured or intentionally obscured DNS infrastructure, a common tactic in phishing operations to evade takedowns or tracking. No registrar, SSL certificate, or HTTP response details are provided in the available intelligence, limiting further infrastructure assessment. Defenders should treat this domain as an active phishing threat targeting cryptocurrency users.

Immediate action includes blocking the domain at the DNS and proxy levels, as well as monitoring for connections to the associated IP 188.114.96.3. Given the elevated risk level and confirmed detections, endpoint protection and email security systems should be updated to flag or quarantine any references to this domain. Additional investigation into the domain's hosting provider and potential affiliate phishing domains is recommended, though current data does not include hosting or registrar details for deeper attribution.