xu3o8[.]entry-cryptolist[.]app

Analysis of the domain xu3o8.entry-cryptolist.app indicates it is an active generic phishing site targeting cryptocurrency users, flagged on July 29, 2026. The domain is currently unresolved, returning an NS_NOT_FOUND status for nameservers, which suggests either recent registration or deliberate evasion of DNS resolution. It appears on one security blocklist and is detected by 13 of 91 security vendors on VirusTotal, confirming its classification as malicious.

The domain resolves to the IP address 188.114.96.3, which may be part of a larger hosting infrastructure used for phishing or scam operations. No specific brand impersonation or phishing kit has been identified in the available data, and the exact content of the site remains unanalyzed. Defenders should treat this domain as elevated risk and block it at the DNS and network levels.

Further investigation into the hosting IP and associated domains is recommended to identify related threats. The lack of nameserver resolution may indicate an attempt to avoid detection, and monitoring for changes in DNS status is advised.