dolan-duck[.]entry-cryptolist[.]app

The domain dolan-duck.entry-cryptolist.app is currently classified as a generic phishing site with an elevated risk rating. Intelligence gathered as of July 29, 2026 shows that the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has identified malicious activity associated with it. VirusTotal analysis reports that 13 of 91 security vendors have flagged the domain, reinforcing the suspicion that the site is used for malicious purposes.

DNS resolution points to the IP address 188.114.97.3; no nameserver information could be retrieved, which may suggest a deliberately minimal DNS footprint or a misconfiguration designed to hinder attribution. No public data on SSL certificates, HTTP response codes, page titles, or content analysis is available, leaving the exact landing page behavior unconfirmed.

Defenders should consider adding the domain to network‑level block lists, monitoring traffic to the associated IP address, and reviewing any recent user reports that reference the domain. Continuous re‑evaluation is advised, as additional detection signals—such as further VirusTotal vendor votes, new blocklist inclusions, or observed HTTP activity—could increase confidence in the threat assessment and trigger broader mitigation actions.