squirtle[.]entry-cryptolist[.]app

This domain, squirtle.entry-cryptolist.app, is currently flagged as an active generic phishing infrastructure. As of the report date 29 July 2026, it appears on one public security blocklist and is explicitly blocked by the PhishDestroy sinkhole, indicating that at least one anti‑phishing consortium has taken remediation action. VirusTotal scans show that 15 out of 91 security vendors have raised detections for the domain, confirming that a notable minority of scanners consider it malicious. DNS resolution points to the IPv4 address 188.114.97.3; no alternative A or AAAA records were observed.

The authoritative name server query returned NS_NOT_FOUND, meaning the registrar does not publish valid nameserver records for the domain, which hampers typical DNS‑based reputation checks. No information on SSL certificates, HTTP response codes, page titles, or content analysis is available in the current intelligence set, so the visual or functional characteristics of the hosted page remain unknown. Likewise, there is no evidence of association with known phishing kits, brand targeting, or additional hosting infrastructure beyond the single IP address.

Defenders should treat the domain as high‑risk given its active blocklist status and multi‑vendor detection count. Immediate mitigation steps include adding squirtle.entry-cryptolist.app to URL filtering and DNS deny lists, blocking outbound connections to 188.114.97.3 at the network perimeter, and monitoring for any internal DNS queries or proxy requests to the domain. Continuous re‑evaluation is advised, as further intelligence such as SSL fingerprint, HTTP content, or additional IPs may emerge, potentially expanding the threat surface.