ye-ai-agent[.]entry-cryptolist[.]app

The domain ye-ai-agent.entry-cryptolist.app is currently active and has been classified as a generic phishing operation. Infrastructure analysis shows that the domain resolves to the IPv4 address 188.114.96.3, which is the sole hosting indicator available. No nameserver records were returned (NS_NOT_FOUND), limiting visibility into the authoritative DNS configuration and complicating attribution of the underlying registrar. VirusTotal scans indicate that 14 out of 91 security vendors have flagged the domain as malicious, providing a moderate consensus of detection across independent engines.

The domain appears on a single external security blocklist, and it is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed has recognized the threat. No additional data such as SSL certificate details, HTTP response codes, page titles, or brand targeting have been disclosed, leaving the content and lure mechanisms of the site unverified. Consequently, the precise phishing vector (e.g., credential harvesting, malicious download) remains uncertain.

Defenders should prioritize blocking network traffic to 188.114.96.3 and add ye-ai-agent.entry-cryptolist.app to local deny lists. Continuous monitoring of DNS resolution and any future VirusTotal or blocklist updates is advised, as changes in detection rates or additional listings may indicate escalation or evolution of the campaign. Organizations employing email filtering or web gateway solutions should ensure that this domain is included in their threat‑intelligence feeds to reduce exposure to the identified phishing risk.