mbp-coin[.]entry-cryptolist[.]app

Analysis of mbp-coin.entry-cryptolist.app as of July 29, 2026 confirms it as an active phishing domain targeting cryptocurrency users. The domain is flagged by 14 of 91 security vendors on VirusTotal, indicating detection by multiple engines, and is blocked by PhishDestroy. It appears on at least one security blocklist, further corroborating its malicious classification. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3, though no nameserver records were found, which may suggest recent takedown efforts or evasion tactics.

The absence of nameserver details does not preclude active resolution, as the domain remains reachable via its IP. No registrar, ASN, or hosting provider details were provided, limiting attribution. The domain's structure, including the subdomain 'mbp-coin' and the parent domain 'entry-cryptolist.app', aligns with common phishing patterns targeting cryptocurrency platforms, though the exact content or brand impersonation is not yet analysed.

Defenders should treat this domain as high-risk and prioritise blocking at the DNS and network levels. Security teams are advised to monitor for connections to 188.114.96.3 and investigate any user interactions with the domain, particularly in environments where cryptocurrency transactions occur. Further analysis of HTTP headers, SSL certificates, or page content may provide additional indicators of compromise or campaign attribution.