chonky[.]entry-cryptolist[.]app

Analysis of chonky.entry-cryptolist.app as of 2026-07-29 shows that the domain resolves to the IPv4 address 188.114.96.3. No authoritative name server records could be retrieved, indicating that the domain’s DNS configuration is either missing or deliberately obscured. The domain has been flagged by 15 of 91 security vendors on VirusTotal, demonstrating a moderate level of detection across independent scanners. It is listed on a single external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one mitigation platform treats the domain as malicious.

No additional intelligence such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are currently available, leaving the content and exact phishing tactics unverified. The observed detection footprint is consistent with a generic phishing infrastructure that leverages a short-lived domain to target users, likely in the cryptocurrency space given the "cryptolist" subdomain component. Defenders should add the domain to network-level deny lists, enforce DNS sinkhole rules for the IP 188.114.96.3, and monitor outbound connections to that address.

Endpoint protection solutions that incorporate VirusTotal reputation data will already generate alerts for the domain due to the 15 positive detections. Continuous observation of DNS queries and any future emergence of SSL or HTTP metadata is recommended to refine detection rules. Until further content analysis is performed, the domain should be treated as high-risk for phishing attempts.