bondx[.]entry-cryptolist[.]app

This domain, bondx.entry-cryptolist.app, is flagged as an active phishing threat targeting cryptocurrency users. As of July 29, 2026, the domain appears on one security blocklist and is detected by 17 of 91 security vendors on VirusTotal, indicating elevated risk. Infrastructure analysis reveals the domain resolves to IP address 188.114.97.3, though no nameservers are currently associated with it, which may suggest recent registration or infrastructure instability. The domain is blocked by PhishDestroy, further corroborating its malicious classification.

The exact content or phishing kit in use remains unconfirmed, as no specific brand target or page title details are available in the current intelligence. However, the domain name and path structure ('entry-cryptolist') suggest an attempt to impersonate a cryptocurrency wallet, exchange, or related service. Defenders should treat this domain as a high-priority threat for crypto-related credential harvesting or wallet-draining schemes. No SSL certificate details or HTTP response data are provided, so additional verification of encryption or page behavior is recommended.

Organizations should immediately block this domain at the DNS and proxy levels, monitor for internal connections to 188.114.97.3, and alert users to potential crypto-themed phishing attempts. If additional telemetry (e.g., user-agent strings, referrer logs) indicates interaction with this domain, incident response procedures should be initiated to assess potential credential exposure or financial fraud. Further analysis of the domain's hosting provider and registration details may reveal additional indicators for broader threat hunting.