bullpepe-com[.]entry-cryptolist[.]app

Analysis of bullpepe-com.entry-cryptolist.app, observed on July 29, 2026, classifies the domain as an active generic phishing infrastructure with an elevated risk rating. The domain is currently blocked by the PhishDestroy mitigation service, indicating that at least one reputable anti‑phishing platform has taken protective action. DNS resolution points to the single IPv4 address 188.114.96.3; no additional A, AAAA, or CNAME records are reported, and authoritative nameserver information is unavailable, as the nameserver query returned a not‑found response.

VirusTotal scans show that 16 of 91 security vendors flagged the domain, providing a moderate consensus of malicious detection across independent scanners. The domain also appears on one external security blocklist, further corroborating its presence in threat‑sharing feeds. No public SSL/TLS certificates, HTTP status codes, or page‑title metadata have been disclosed, leaving the surface‑web characteristics of the site unverified.

Given the limited visibility into the hosting provider and the absence of registrar details, investigators should treat the underlying infrastructure as partially opaque. Defensive recommendations include adding the resolved IP address 188.114.96.3 to network deny lists, enforcing DNS sink‑holing for the full domain string, and ensuring that endpoint protection solutions ingest the VirusTotal detection count to trigger appropriate alerts. Continuous monitoring of emerging blocklist entries and periodic re‑query of DNS records are advised to capture any future changes to the domain's name server configuration or hosting environment.