marso-tech[.]entry-cryptolist[.]app

The domain marso-tech.entry-cryptolist.app is currently listed as an active generic phishing infrastructure with an elevated risk rating. It appears on a single security blocklist and has been flagged by 13 of 91 security vendors on VirusTotal, indicating moderate consensus among detection engines that the domain is malicious. The PhishDestroy service has also added the domain to its blocklist, confirming its use in phishing campaigns.

DNS resolution points to the IP address 188.114.96.3; the absence of published nameserver records (NS_NOT_FOUND) suggests either a deliberately hidden DNS configuration or a recent change that has not propagated. No public information about the registrar, ASN, or country of the hosting provider is available in the supplied intelligence, limiting attribution depth. Likewise, analysis of SSL/TLS certificates, HTTP response codes, page titles, or any brand‑specific content has not been disclosed, leaving the visual or functional aspects of the site unverified.

Defenders should treat any traffic to or from this domain as suspicious. Recommended mitigations include immediate blocking at perimeter firewalls and DNS filtering, adding the domain to local threat intelligence feeds, and monitoring for any outbound connections to the associated IP address. Continuous re‑assessment is advised, as further reconnaissance may reveal additional infrastructure ties or victim‑targeting details.