cryptoautos[.]entry-cryptolist[.]app

The domain cryptoautos.entry-cryptolist.app resolves to the IPv4 address 188.114.96.3. Active resolution confirms that the address is currently routable and serves content over HTTP(S). The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering platform, indicating that it is being leveraged for phishing distribution. VirusTotal reports show that 13 of 91 scanning engines have generated a detection for the domain, a ratio that aligns with typical malicious phishing infrastructure.

Nameserver queries return no authoritative NS records, which may reflect a transient DNS configuration or deliberate use of a third‑party DNS service to hide ownership. No registrar, creation date, or SSL certificate information is presently available in the collected intelligence, and the page title has not been harvested, limiting the ability to identify the exact lure or targeted brand. Safe Browsing, Open Threat Exchange, and other reputation services have not provided a published verdict for this host, so external visibility remains limited.

Infrastructure analysis indicates that the hosting IP belongs to a network often associated with fast‑flux or shared hosting environments, a pattern frequently observed in phishing campaigns. Defenders should add cryptoautos.entry-cryptolist.app to DNS and URL filtering policies, enforce block‑listing of the associated IP address, and monitor outbound connections for any unexpected traffic to the host. Sharing this indicator set with threat‑sharing platforms will aid in rapid community response.