izzy[.]entry-cryptolist[.]app

The domain izzy.entry-cryptolist.app is actively flagged as a credential‑harvesting site. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, a host that appears in a single security blocklist and has been identified by the PhishDestroy sinkhole as malicious. Nameserver lookup returned NS_NOT_FOUND, indicating that authoritative DNS records are either missing or deliberately concealed, a tactic often used to impede rapid takedown.

VirusTotal scans report that 15 of 91 security vendors label the domain as malicious, reinforcing the suspicion of phishing behavior. The domain has been added to one external blocklist, which further corroborates its association with unwanted activity. No additional public intelligence such as SSL certificate details, HTTP response codes, or page titles is currently available, leaving the surface‑web characteristics of the site unverified.

Defenders should treat any traffic to izzy.entry-cryptolist.app as hostile, block the domain at network perimeter devices, and update endpoint protection signatures to include the observed VirusTotal detections. Continuous monitoring of the hosting IP 188.114.96.3 for new associations is recommended, as threat actors frequently reuse infrastructure across campaigns. In the absence of further forensic artifacts, the precautionary stance remains elevated, and any credential submission attempts originating from this domain should be considered compromised.