gvnr[.]entry-cryptolist[.]app

Analysis of gvnr.entry-cryptolist.app indicates that the domain is actively being used for phishing. VirusTotal reports that 14 of 91 scanned security vendors flag the domain as malicious, providing a consensus indication of malicious intent. DNS resolution points to the IPv4 address 188.114.97.3; no alternate A or AAAA records were observed, and the domain’s authoritative nameservers could not be retrieved (NS_NOT_FOUND), suggesting that the registrar’s name server information is either hidden or not properly configured.

The domain appears on a single external security blocklist and is explicitly listed by the PhishDestroy service as a blocked phishing site, reinforcing the classification. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any Safe Browsing or Open Threat Exchange (OTX) entries. Consequently, the precise content served by the site, its hosting provider, and any associated infrastructure beyond the resolved IP remain uncertain.

Defenders should treat the domain as hostile: incorporate the IP address 188.114.97.3 and the domain name into network‑level blocklists, configure DNS filtering to deny resolution, and monitor outbound connections for attempts to reach the address. Continuous re‑evaluation is advised, as additional telemetry (e.g., certificate data or HTTP headers) may emerge and refine the threat profile.