ivault[.]entry-cryptolist[.]app

The domain ivault.entry-cryptolist.app is currently classified as an active, elevated‑risk phishing infrastructure. Threat intelligence records show the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. DNS resolution points to the IP address 188.114.97.3, which is the sole host associated with the domain at the time of analysis.

No nameserver records could be retrieved, indicating either a misconfiguration or deliberate obfuscation of the authoritative DNS infrastructure. VirusTotal scanning reports that 14 of 91 security vendors have flagged the domain as malicious, providing independent corroboration of its phishing nature. The limited blocklist presence suggests that broader community awareness may still be developing, while the PhishDestroy block confirms that at least one dedicated anti‑phishing platform has taken action.

Because the domain’s registration details, SSL certificate status, HTTP response codes, and page content have not been disclosed, the full scope of the phishing campaign remains uncertain. Defenders should prioritize immediate blocking of ivault.entry-cryptolist.app at perimeter firewalls and DNS filtering solutions, as well as monitoring traffic to the associated IP 188.114.97.3 for anomalous activity. Continuous re‑evaluation is advised, given the evolving detection landscape and the possibility of additional infrastructure being deployed under the same IP or related domains.