dora-ai-by-virtuals[.]entry-cryptolist[.]app

The domain dora-ai-by-virtuals.entry-cryptolist.app is currently active and has been identified as a malicious phishing site. It is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has catalogued it as hostile. DNS resolution points to the IP address 188.114.96.3, which can be used for network‑level containment.

No authoritative nameserver records were returned, which limits the ability to trace the hosting infrastructure through standard NS lookups. VirusTotal analysis shows that 13 out of 91 scanning engines flagged the domain as malicious, confirming that a non‑trivial subset of security vendors consider the site to be abusive. No additional intelligence such as page title, SSL certificate details, or specific brand impersonation is available at this time, so the exact lure presented to victims remains unknown.

Defenders should immediately add the domain to URL filtering and DNS block lists, enforce outbound filtering for the associated IP address, and monitor for any outbound connections to that host. Email gateways should be configured to flag messages containing this domain, and incident response teams should treat any credential submissions to the site as potentially compromised. Continuous re‑evaluation is advised, as future scans may reveal additional indicators such as payload signatures, hosting provider details, or the specific brand being spoofed.