pacu-jalur[.]entry-cryptolist[.]app

Analysis of pacu-jalur.entry-cryptolist.app as of July 29, 2026 shows that the domain is currently active and resolves to the IP address 188.114.96.3. VirusTotal has indexed the domain and 16 of 91 scanning engines have reported it as malicious, indicating a significant detection rate. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing. The authoritative name server information could not be retrieved (NS_NOT_FOUND), which hampers further DNS‑based reputation checks.

No additional infrastructure details such as ASN, hosting provider, or SSL certificate metadata are available from the supplied intelligence. Likewise, the page title and any observed branding have not been disclosed, leaving the exact content of the hosted site unknown. The combination of multiple vendor detections, blocklist inclusion, and active blocking by a dedicated anti‑phishing platform provides concrete evidence that the domain is being leveraged for malicious credential‑stealing or information‑gathering activities.

Defenders should add 188.114.96.3 and the fully qualified domain name to network‑level deny lists, configure web proxies to block HTTP requests to the host, and monitor DNS logs for any resolution attempts. Continued scanning with sandbox and URL reputation services is recommended to capture any evolving payloads or delivery mechanisms. Because the domain’s registration details and hosting context remain opaque, threat‑hunters should also query passive DNS and WHOIS sources for future changes that could indicate a shift in infrastructure or a takeover by other malicious actors.