kimchi[.]entry-cryptolist[.]app

The domain kimchi.entry-cryptolist.app is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IPv4 address 188.114.97.3. No authoritative name server records were returned (NS_NOT_FOUND), indicating that conventional DNS queries do not reveal the hosting provider’s name servers. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service.

VirusTotal reports that 14 of 91 scanned security vendors have flagged the domain as malicious, confirming a consensus of concern among a subset of scanning engines. The limited blocklist presence suggests that broader community feeds have not yet incorporated the domain, but the existing vendor detections and the PhishDestroy blocklist provide concrete evidence of abuse. Because the domain’s registration details, SSL certificate status, HTTP response codes, and page content have not been disclosed, the full scope of the phishing operation remains partially unknown.

Defenders should immediately add 188.114.97.3 to network‑level deny lists and enforce DNS filtering for kimchi.entry-cryptolist.app. Continuous monitoring of the IP reputation and periodic rescanning of the domain with multiple scanners are advised to capture any changes in detection rates. Organizations should also consider updating email security gateways to block any messages containing links to this domain, and threat‑intel teams should share the indicator set with peer groups to accelerate collective mitigation.