coinnekt[.]entry-cryptolist[.]app

Analysis as of July 29, 2026 indicates that the domain coinnekt.entry-cryptolist.app is actively resolving to the IPv4 address 188.114.96.3. The domain has been flagged by PhishDestroy and is listed on a single public security blocklist. VirusTotal reports that fifteen out of ninety‑one scanning engines have identified the domain as malicious, reinforcing the suspicion of phishing activity. Nameserver information is unavailable (NS_NOT_FOUND), which limits visibility into the hosting provider and may suggest the use of a dynamic or privacy‑focused DNS service.

No SSL/TLS certificate details, HTTP response codes, or page title information have been published, leaving the exact content of the site unverified. The limited telemetry therefore supports a classification of generic phishing, but the absence of payload samples or page screenshots prevents a more granular attribution. Defenders should block coinnekt.entry-cryptolist.app at DNS and proxy layers, add the associated IP address 188.114.96.3 to network‑level deny lists, and monitor for outbound connections to that address. Continuous re‑scanning of the domain with sandbox and URL‑reputation services is advised to capture any future changes in behavior or hosting.

Organizations employing email filtering should treat messages containing this domain as high‑risk and quarantine or reject them. Because the domain’s registrar and creation date are not provided, threat‑intel teams should query WHOIS records when possible to enrich attribution. Overall, the existing evidence warrants an elevated risk posture and proactive mitigation.