zeropai[.]entry-cryptolist[.]app

Analysis of zeropai.entry-cryptolist.app indicates an active generic phishing infrastructure with an elevated risk rating as of July 29, 2026. The domain resolves to the IPv4 address 188.114.97.3 and is presently listed on one public security blocklist. Independent threat‑mitigation service PhishDestroy has already blocked the domain, confirming its malicious intent.

VirusTotal scans show that 15 of 91 security vendors flag the domain, providing additional corroboration of its phishing nature. The DNS query for authoritative name servers returns NS_NOT_FOUND, suggesting either a deliberately hidden nameserver configuration or a recent DNS change that has not propagated fully. No further intelligence such as registrar details, SSL certificate information, or page title has been disclosed, leaving those aspects of the infrastructure unverified.

Defenders should prioritize immediate outbound filtering of traffic to 188.114.97.3 and enforce domain‑level blocking for zeropai.entry-cryptolist.app across perimeter and endpoint security solutions. Continuous monitoring of the IP address for any new services or associated subdomains is advised, as well as periodic re‑scanning with VirusTotal or similar multi‑engine platforms to capture any changes in detection rates. Given the current evidence, the domain should be treated as a confirmed phishing site and incorporated into threat‑intel feeds to mitigate exposure to credential‑harvesting attempts.