non-playable-coin[.]entry-cryptolist[.]app

Analysis of the domain non-playable-coin.entry-cryptolist.app indicates it is actively associated with cryptocurrency-related phishing infrastructure as of July 29, 2026. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by 14 of 91 security vendors on VirusTotal, suggesting a pattern of malicious activity. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, though no nameservers are currently associated with it, which may indicate an attempt to obscure hosting details or a misconfigured deployment. The absence of nameserver records does not inherently confirm malicious intent but is atypical for legitimate domains and warrants further scrutiny.

No additional details regarding the domain's registrar, autonomous system number (ASN), or hosting provider are available in the current intelligence. The specific content or brand impersonation tactics of the site remain unconfirmed, as no page title, scam kit, or targeted brand is provided in the observable evidence. Defenders should treat this domain as part of a broader cryptocurrency phishing campaign, particularly given the inclusion of terms like 'coin' and 'crypto' in the domain name, which align with common phishing themes in this sector.

Organizations are advised to block access to non-playable-coin.entry-cryptolist.app at the network level and monitor for related indicators of compromise. Security teams should correlate this domain with other cryptocurrency-themed phishing domains resolving to the same IP or sharing similar naming conventions. Given the elevated risk level and active status, further investigation into associated infrastructure is recommended to identify potential lateral movement or secondary payload delivery mechanisms.