robinhood-ai[.]entry-cryptolist[.]app

Analysis indicates that the domain robinhood-ai.entry-cryptolist.app is currently flagged as a phishing vector. The domain resolves to the IPv4 address 188.114.97.3, which is an address associated with public hosting services and appears on at least one external security blocklist. The anti‑phishing service PhishDestroy has recorded the domain as blocked, confirming that known mitigation platforms have taken action against it. VirusTotal scans show that 15 of 91 security vendors have raised detections, reinforcing the suspicion of malicious activity. Nameserver queries returned no results, suggesting that the authoritative DNS records are either hidden or not properly configured, which is a common tactic to impede attribution.

The domain is listed on a single security blocklist, indicating that while it has attracted some attention, broader community awareness may still be limited. No additional intelligence such as registrar details, SSL certificate information, HTTP response codes, or page title has been published, leaving the content of the site unverified. Because no SSL certificate data is available, the presence of HTTPS cannot be confirmed, and the lack of a page title prevents verification of any brand impersonation. The absence of nameserver information also hinders the ability to trace the registration source.

Consequently, the primary observable indicators are the IP resolution, the blocklist entry, the PhishDestroy block, and the multi‑vendor VirusTotal detections. Defenders should immediately add the domain and its resolved IP address to network deny lists, enforce URL filtering policies that block access, and monitor for any related traffic patterns. Organizations employing email gateways should flag any messages containing this domain as malicious, and endpoint protection solutions should consider the domain as an indicator of compromise.