block-ai[.]entry-cryptolist[.]app

Analysis dated July 29 2026 indicates that the domain block-ai.entry-cryptolist.app resolves to the IPv4 address 188.114.96.3. The domain’s authoritative name server information could not be retrieved (NS_NOT_FOUND), suggesting that the registrar may have deliberately omitted or concealed DNS delegation details. The domain is listed on one public security blocklist and is actively blocked by the PhishDestroy mitigation service. VirusTotal has recorded detections from 16 of 91 scanned scanners, confirming that multiple independent engines have flagged the host as malicious.

The detection count, combined with its presence on a blocklist, raises the risk profile to elevated. No additional public intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is available at the time of writing, leaving the exact content and lure technique unconfirmed. Defenders should add block-ai.entry-cryptolist.app to network deny lists, enforce DNS filtering, and consider blocking the associated IP address 188.114.96.3 at perimeter firewalls.

Continuous monitoring of the IP reputation and periodic re‑scans with VirusTotal are advised to capture any changes in detection coverage. Because the infrastructure appears to be actively used, threat‑hunting teams should query logs for recent outbound connections to the IP and correlate with user activity to identify potential compromise attempts. In the absence of further contextual data, the domain should be treated as a malicious phishing resource and mitigated accordingly.