decenter-ai[.]entry-cryptolist[.]app

The domain decenter-ai.entry-cryptolist.app is currently listed on a single security blocklist and is actively blocked by the PhishDestroy service. DNS resolution returns the address 188.114.96.3; no alternative A records have been observed. The authoritative name server query fails, returning NS_NOT_FOUND, indicating that the domain’s nameserver configuration is either missing or deliberately concealed. VirusTotal analysis shows that 12 of 91 scanned security vendors have reported the host as malicious, reinforcing the classification as a generic phishing vector.

The elevated risk rating and active status reflect ongoing use in a phishing campaign. The limited visibility of the hosting environment—absence of ASN, registrar, or country data—prevents a complete attribution of the infrastructure, and no SSL certificate details or HTTP response codes have been published. Consequently, defenders should treat the domain as hostile: immediate network‑level blocks should be applied to the domain and its resolved IP address, and outbound traffic to 188.114.96.3 should be monitored for anomalous patterns.

Inclusion of the domain in internal blocklists and security gateways, as well as sharing the indicator with threat‑intelligence platforms, will reduce exposure. Continuous re‑query of DNS and periodic VirusTotal rescans are recommended to detect any changes in detection coverage or additional infrastructure deployment. Until further forensic detail emerges, the observed indicators constitute the primary evidence for mitigation.