horse-coin[.]entry-cryptolist[.]app

Analysis of horse-coin.entry-cryptolist.app indicates that the domain is currently active and associated with a generic phishing campaign. VirusTotal reports that 13 of 91 security vendors have flagged the domain, providing a moderate level of consensus among automated scanners. DNS resolution attempts return the IPv4 address 188.114.96.3, while the authoritative nameserver query fails, yielding NS_NOT_FOUND, which suggests either a misconfigured zone or intentional obfuscation of hosting details.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service, reinforcing the view that security operators consider it malicious. No additional metadata such as SSL certificate data, HTTP response codes, page title, or content snapshots is available from the supplied intelligence, leaving the exact phishing lure and target brand undefined. Given the limited but consistent signals—multiple vendor detections, blocklist presence, and active blocking by PhishDestroy—defenders should treat the domain as hostile.

Recommended mitigations include adding horse-coin.entry-cryptolist.app to network denial lists, enforcing DNS sinkholing for the resolved IP 188.114.96.3, and monitoring the IP for any new activity or additional domains that resolve to the same host. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional infrastructure or payload characteristics that could refine detection rules.