orld-liberty-financial-space[.]entry-cryptolist[.]app

Analysis of orld-liberty-financial-space.entry-cryptolist.app indicates active malicious use consistent with generic phishing. The domain resolves to the IP address 188.114.97.3, confirming a single hosting endpoint that can be targeted for traffic filtering. No authoritative nameserver records were returned, limiting visibility into the domain's DNS configuration.

VirusTotal scans show that 13 of 91 security vendors have flagged the domain, providing independent confirmation of malicious behavior. The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that multiple defensive platforms recognize it as a threat. No additional intelligence such as Safe Browsing verdicts, Open Threat Exchange (OTX) entries, registrar details, SSL certificate data, HTTP response codes, trust scores, or page title information is available at this time, leaving the content and exact phishing vector undocumented.

Given the observed indicators—host resolution, vendor detections, blocklist inclusion, and PhishDestroy action—defenders should treat the domain as high‑confidence phishing. Recommended mitigations include adding the domain and its resolving IP to network deny lists, configuring web proxies to block any HTTP/HTTPS requests to the host, and monitoring DNS logs for lookup attempts. Continuous re‑evaluation is advised should new attributes such as page content or additional vendor detections emerge.