musk-ai-agent[.]entry-cryptolist[.]app

The domain musk-ai-agent.entry-cryptolist.app is listed as active with an elevated risk rating as of July 29, 2026. DNS resolution points to the IPv4 address 188.114.97.3, while authoritative name‑server data is missing (NS_NOT_FOUND), suggesting a deliberately obscured or misconfigured DNS configuration. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy mitigation service, indicating that it is being used for phishing‑related campaigns.

VirusTotal analysis shows that 15 out of 91 security vendors flagged the domain as malicious, providing independent confirmation of its abusive nature. No additional public intelligence such as Safe Browsing, OTX, SSL certificate details, or page title information is currently available for this host. Given the absence of name‑server records and limited visibility into the hosting environment, further network‑level investigation is recommended to assess whether the IP address is shared with other malicious infrastructure.

Defenders should ensure that perimeter firewalls, web proxies, and endpoint protection solutions block traffic to both the domain and its resolved IP address, and they should incorporate the observed indicators into internal blocklists. Monitoring for related command‑and‑control traffic, credential harvesting attempts, or other artifacts associated with the IP address is advisable. Organizations that have potentially exposed credentials should initiate credential rotation and user awareness campaigns warning against interaction with emails or messages referencing this domain or any similar brand‑less URLs.