fart-ai[.]entry-cryptolist[.]app

Analysis of the domain fart-ai.entry-cryptolist.app shows it is presently listed on a security blocklist and has been actively blocked by the PhishDestroy service. DNS resolution points to the IPv4 address 188.114.97.3; no authoritative nameserver records were returned, limiting deeper zone‑level investigation. The domain appears in VirusTotal scans with 13 of 91 participating security vendors reporting malicious classifications, confirming a consensus that the host is engaged in illicit activity.

The elevated risk rating aligns with the blocklist presence and the modest but notable vendor detection rate. At the time of this report the domain remains active, suggesting that the phishing infrastructure is still operational. Absence of publicly available page title, SSL certificate details, or identified target brand prevents a more granular description of the lure employed.

Defenders should immediately deny network traffic to 188.114.97.3 and add fart-ai.entry-cryptolist.app to local and upstream DNS blacklists. Continuous monitoring of the IP for additional malicious associations is advised, as is periodic re‑scanning on VirusTotal or similar aggregators to capture any changes in vendor verdicts. Given the limited intelligence, further investigation—such as active probing of the HTTP service, retrieval of response headers, and collection of any hosted payloads—would be required to fully characterize the phishing payload and to support takedown efforts.