betduelai[.]entry-cryptolist[.]app

As of July 29, 2026, the domain betduelai.entry-cryptolist.app is actively flagged for generic phishing threats. Security review shows the domain is currently blocked by the PhishDestroy platform and appears on at least one security blocklist, indicating it is recognized by defenders as a phishing infrastructure. VirusTotal scans corroborate the risk, with 14 out of 91 security vendors marking the domain as malicious or unsafe. The domain resolves to IP address 188.114.96.3, but no specific hosting provider or ASN details are available.

Nameserver records are missing (NS_NOT_FOUND), which may suggest evasive tactics or incomplete DNS configuration often observed with phishing operations. The exact content or targeting of the site has not yet been analyzed, as there is no available page title, scam type, or brand association in the current intelligence. Defenders should treat this domain as elevated risk and consider immediate blocking in enterprise networks. Given its active status and multiple security detections, ongoing monitoring is recommended for related infrastructure, including the resolved IP.

Further investigation into lateral connections and potential campaign scope is advised, especially since the domain’s DNS and hosting details are limited, increasing the challenge of attribution. No evidence links to Safe Browsing, OTX, registrar, or SSL certificate specifics are present in the available data. In summary, the domain demonstrates multiple risk indicators and should be handled as an active phishing threat by security teams.