yaptrade[.]entry-cryptolist[.]app

The domain yaptrade.entry-cryptolist.app is currently classified as an active generic phishing infrastructure with an elevated risk rating. Technical resolution shows the domain resolves to the IPv4 address 188.114.96.3. No authoritative nameserver records are returned (NS_NOT_FOUND), indicating that the domain's DNS configuration may be intentionally obfuscated or that the nameserver data is unavailable in public queries. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has taken remediation action against it.

VirusTotal analysis reports that 15 of 91 scanning engines flag the domain as malicious, providing independent corroboration of its phishing nature. The available intelligence does not include details such as the hosting provider, ASN, country of origin, SSL/TLS certificate status, HTTP response codes, page title, or any observed brand targeting. Consequently, the exact content hosted on the site, the specific phishing kit employed, and any victim interaction patterns remain unknown.

Defenders should prioritize immediate containment actions: add the domain to DNS sinkhole or block lists, enforce firewall rules to deny outbound connections to 188.114.96.3, and ingest the PhishDestroy indicator into SIEM correlation rules. Continuous monitoring of DNS query logs for the domain and its resolved IP is advised, as well as periodic re‑scanning with VirusTotal or comparable multi‑engine services to capture any changes in detection rates. Because the domain lacks publicly visible registrar or SSL metadata, threat hunters should consider broader network‑level heuristics—such as anomalous traffic to the IP address or repeated failed login attempts—to identify potential compromise attempts linked to this phishing campaign.