market-fun[.]entry-cryptolist[.]app

market-fun.entry-cryptolist.app was observed resolving to the IPv4 address 188.114.97.3. The domain lacks publicly visible nameserver records, as indicated by a “NS_NOT_FOUND” result, which may reflect a misconfiguration or intentional concealment of DNS infrastructure. VirusTotal has recorded 16 positive detections out of 91 submitted security scanners, demonstrating that a minority of reputable engines have classified the host as malicious. The domain is present on a single external blocklist and is actively blocked by the PhishDestroy service, providing additional confirmation of its abusive nature.

No SSL certificate details, HTTP response codes, or page title information have been published, leaving the exact content and landing‑page behavior unverified at this time. The limited visibility of the underlying web server and the absence of publicly disclosed registrant data further restrict attribution efforts. Defenders should prioritize adding the domain and its resolving IP address to network‑level deny lists and intrusion‑prevention signatures. Continuous monitoring of the IP 188.114.97.3 for changes in reputation, as well as periodic rescans on multi‑engine platforms, is advised to capture any evolution in payload delivery.

Organizations employing email filtering should ensure that messages containing URLs to this domain are quarantined or rejected. Incident‑response teams should collect any client‑side artifacts that reference the domain for forensic correlation, and threat‑intel sharing groups should be notified of the observed detections to improve community‑wide mitigation. Until further forensic analysis of the hosted content is available, the domain should be treated as an active phishing infrastructure.