bigfacts[.]entry-cryptolist[.]app

On July 29, 2026, analysis flagged bigfacts.entry-cryptolist.app as an active credential harvesting domain. The domain resolves to the IP address 188.114.97.3, and its authoritative nameserver records are currently unavailable (NS_NOT_FOUND). VirusTotal has recorded 16 detections out of 91 scanning engines, indicating a notable level of malicious confidence across independent security products.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing its classification as a phishing‑related threat. No publicly disclosed SSL certificate details, HTTP response codes, or page title information are available at this time, limiting insight into the site’s transport security posture and visible content. Likewise, registrar data, ASN, and geographic hosting information have not been disclosed, leaving the underlying infrastructure opaque.

Given the limited visibility, defenders should treat the domain as high‑risk until further intelligence is obtained. Recommended mitigations include adding the domain to DNS and proxy blocklists, enforcing outbound DNS query logging for the IP 188.114.97.3, and integrating the indicator into endpoint and email security solutions that reference VirusTotal detection counts. Continuous monitoring of threat intel feeds for additional sightings or attribution details is advised to refine response actions as the investigation progresses.