suiba-inu[.]entry-cryptolist[.]app

The domain suiba-inu.entry-cryptolist.app is currently classified as a generic phishing site with an elevated risk rating and an active status as of July 29, 2026. Infrastructure analysis shows the domain resolves to the IPv4 address 188.114.97.3. DNS interrogation returned no nameserver records (NS_NOT_FOUND), which suggests either a deliberately minimal DNS footprint or a misconfiguration that limits visibility into the authoritative name servers. The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy filtering service.

VirusTotal scans indicate that 15 of 91 security vendors have flagged the domain, providing a moderate level of detection consensus across independent scanners. No additional context such as SSL/TLS details, HTTP response codes, page titles, or brand targeting is available at this time, leaving the exact phishing payload and lure mechanisms unverified. Given the limited but consistent threat indicators, defenders should prioritize static blocking of the domain and its resolved IP address across perimeter and endpoint controls. Continuous monitoring of the IP 188.114.97.3 for any new associations, as well as periodic re‑scanning on platforms like VirusTotal, is advised to capture any evolution in malicious behavior.

Organizations employing DNS‑based filtering should ensure the domain is added to blocklists and that any heuristic rules that detect similar naming patterns (e.g., sub‑domains containing "entry-cryptolist") are enabled. Because the domain lacks observable nameserver data, sinkholing the IP or employing a passive DNS feed may help uncover additional infrastructure used by the threat actor. Until further forensic content from the landing page is released, the precautionary approach is to treat the domain as malicious and prevent user access.