conan-meme[.]entry-cryptolist[.]app

On July 29 2026 analysts observed that the domain conan-meme.entry-cryptolist.app is actively used in a generic phishing campaign. VirusTotal records show that 14 of 91 security vendors have flagged the domain as malicious, indicating a consensus among scanners that the site hosts deceptive content. The domain resolves to the IPv4 address 188.114.97.3; no additional hosting or ASN details are provided in the current intelligence set.

Nameserver lookup returned NS_NOT_FOUND, suggesting that the authoritative name servers are either hidden or not publicly resolvable. The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy sinkhole, confirming that at least one upstream protection service has taken mitigation action. No SSL certificate information, HTTP status codes, page titles, or Safe Browsing verdicts are available, so the surface‑web characteristics of the site remain unverified.

The lack of publicly observable page metadata limits the ability to confirm the exact phishing lure or credential‑stealing form in use, but the aggregated vendor detections and blocklist presence provide sufficient confidence to treat the domain as hostile. Defenders should add conan-meme.entry-cryptolist.app to DNS and URL filtering rules, block outbound connections to 188.114.97.3, and monitor for any attempted communications from internal hosts. Continuous re‑evaluation is advised in case additional intelligence, such as page content or certificate data, becomes available.