johnny-suede[.]entry-cryptolist[.]app

The domain johnny-suede.entry-cryptolist.app is currently flagged as an active generic phishing site with an elevated risk rating. VirusTotal analysis shows that 13 of 91 security vendors have identified malicious behavior associated with the domain, indicating a moderate level of consensus among scanning engines. The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing campaigns.

DNS resolution returns the IP address 188.114.96.3, but the authoritative nameserver information cannot be retrieved (NS_NOT_FOUND), which may reflect deliberate obfuscation or a misconfiguration intended to hinder attribution. No additional infrastructure details such as ASN, country, SSL certificate metadata, or HTTP response codes are available from the supplied intelligence. Consequently, the precise hosting environment and any potential backend services remain uncertain.

Defenders should prioritize immediate mitigation actions: add johnny-suede.entry-cryptolist.app to local and network‑level blocklists, enforce outbound filtering for the associated IP address, and monitor DNS queries for this domain to detect any future resolution changes. Continuous re‑evaluation is advised, as further evidence such as page content, SSL characteristics, or additional vendor detections could refine the threat profile.