orld-series-of-degens[.]entry-cryptolist[.]app

Analysis as of July 29, 2026 indicates that the domain orld-series-of-degens.entry-cryptolist.app is actively being used in a phishing campaign. The domain resolves to the IPv4 address 188.114.97.3 and is listed on a single public security blocklist. Independent remediation tooling, specifically PhishDestroy, has confirmed the domain as malicious and has applied blocking rules.

VirusTotal scans show that 15 out of 91 antivirus and URL scanning engines currently flag the domain as malicious, providing a modest consensus of detection across multiple vendors. No nameserver records were returned during the lookup, suggesting either a misconfiguration or deliberate obfuscation of DNS infrastructure. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any registrar and ASN metadata, leaving those aspects of the infrastructure unverified at this time.

Consequently, the precise nature of the phishing page, including the targeted brand or service, remains unknown pending further content analysis. Defenders should prioritize immediate containment by adding the domain to local and network-wide blocklists, monitoring DNS queries for any resolution attempts to 188.114.97.3, and updating intrusion detection signatures to reflect the observed detection pattern. Continuous re‑evaluation is advised, as additional indicators such as page content, SSL fingerprint, or hosting provider information may emerge, enabling more granular mitigation steps.