chinese-neiro[.]entry-cryptolist[.]app

The domain chinese-neiro.entry-cryptolist.app is currently flagged as an active credential‑harvesting infrastructure. VirusTotal reports that 14 of 91 scanned security vendors have identified the domain as malicious, indicating a moderate consensus among scanning engines. The domain appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one dedicated anti‑phishing platform has taken remediation action.

DNS resolution points to the IP address 188.114.97.3; no alternate A or AAAA records were observed, and authoritative name server queries returned NS_NOT_FOUND, suggesting that the domain’s DNS configuration may be incomplete or intentionally obscured. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts is available at this time. Consequently, the precise content served by the site, the targeted brand, or the phishing kit employed remain unknown.

Analysts should treat the domain as a high‑confidence threat indicator and consider immediate containment steps: add the domain and its resolved IP to network‑level blocklists, enforce DNS sinkholing for the host, and monitor outbound traffic for connections to 188.114.97.3. Continuous re‑scanning with multi‑vendor services is recommended to capture any changes in detection status, and threat‑intel sharing platforms should be updated with the observed vendor count and blocklist presence to improve collective visibility.