pepo[.]entry-cryptolist[.]app

This domain, pepo.entry-cryptolist.app, is currently classified as an active generic phishing site with an elevated risk rating. Infrastructure analysis reveals that the hostname resolves to the IPv4 address 188.114.96.3. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, indicating that at least one upstream mitigation system has taken action against it. VirusTotal reports that 14 of 91 scanning engines have flagged the domain as malicious, providing independent corroboration of its abusive nature.

The authoritative name server information could not be retrieved, as the nameserver field is reported as NS_NOT_FOUND, which limits the ability to assess the domain’s registration and delegation details. No additional intelligence such as SSL certificate data, HTTP response codes, or page title has been published, leaving the content of the site unverified. Defenders should prioritize immediate containment by adding pepo.entry-cryptolist.app to DNS deny lists and firewall rule sets.

Because the underlying IP address 188.114.96.3 is shared by the malicious host, network‑level blocks on that address are also advisable, though the possibility of legitimate services sharing the same IP cannot be excluded without further passive DNS investigation. Continuous monitoring of threat‑intel feeds for new detections, blocklist additions, or changes in the detection count on VirusTotal is recommended to keep the protection posture up to date. Where possible, organizations should also instrument outbound traffic logs to identify any attempted connections to this domain, and trigger alerts for any successful DNS queries or HTTP requests originating from internal hosts.