incinerator[.]entry-cryptolist[.]app

The domain incinerator.entry-cryptolist.app is currently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IPv4 address 188.114.96.3. No authoritative name servers were discovered in DNS queries, which may indicate either a deliberately hidden configuration or a recent DNS change that has not propagated fully. The domain is listed on one public security blocklist and has been specifically blocked by the PhishDestroy filtering service.

VirusTotal scans have returned 14 positive detections out of 91 security vendors, confirming that multiple independent scanners consider the host malicious. No additional telemetry such as page title, HTTP response code, SSL certificate details, or registrar information is available in the current intelligence set, leaving the exact content and hosting provider undisclosed. This lack of visible metadata increases uncertainty about the site’s payload delivery mechanisms and the specific lure employed. Defenders should prioritize immediate mitigation steps: add incinerator.entry-cryptolist.app to DNS and URL blocklists, enforce outbound traffic filtering for the IP 188.114.96.3, and monitor network logs for any connections to the domain or its IP.

Continuous re‑scanning with VirusTotal and inclusion in threat‑intel feeds are recommended to capture any evolution of the host’s behavior. Organizations using web filtering solutions should ensure the domain is categorized under phishing to trigger appropriate user warnings. Because the domain’s infrastructure appears minimal yet is already flagged by multiple vendors, rapid containment is advised while further investigative work gathers any missing page‑level artifacts.