book-of-ethereum[.]entry-cryptolist[.]app

On 29 July 2026 the domain book-of-ethereum.entry-cryptolist.app was classified as an active crypto drainer with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IPv4 address 188.114.96.3. The address is hosted on a service that currently does not return any authoritative name server records (NS_NOT_FOUND), indicating that the domain’s DNS configuration is either deliberately concealed or misconfigured. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service.

VirusTotal reports that 16 of 91 scanned security vendors have flagged the domain as malicious, corroborating the blocklist evidence. No additional intelligence such as registrar information, SSL certificate details, HTTP response codes, or page title is available in the current dataset, leaving those aspects of the infrastructure unverified. The lack of visible name server data and the limited blocklist presence suggest a low‑profile deployment, but the detection count on VirusTotal and the specific crypto‑drainer classification indicate a targeted threat aimed at illicitly extracting cryptocurrency assets. Defenders should add the resolved IP address 188.114.96.3 to network‑level deny lists, ensure that any outbound connections to this host are blocked, and monitor DNS logs for queries to the domain.

Because the domain’s registrar and SSL status are unknown, further passive DNS and certificate transparency monitoring is recommended to capture any future changes. Continuous re‑scanning of the domain with multi‑engine services will help verify whether additional vendors begin to flag the site, and integration with threat‑intel feeds that include the PhishDestroy blocklist will improve detection capability. Until more comprehensive evidence becomes available, the domain should be treated as malicious and blocked across enterprise perimeter defenses.