laikacto[.]entry-cryptolist[.]app

The domain laikacto.entry-cryptolist.app is currently classified as a generic phishing site with an elevated risk rating. The domain resolves to the IPv4 address 188.114.97.3; no authoritative name server records were returned during DNS interrogation, indicating a possible use of private or dynamically updated name servers. The domain appears on a single external security blocklist, and the commercial phishing mitigation service PhishDestroy has listed it as blocked, confirming active enforcement against the host. VirusTotal analysis shows that 15 of 91 scanned security engines flagged the domain as malicious, providing a moderate consensus of detection across multiple vendors.

The presence of multiple detections, combined with the blocklist entry, supports the elevated risk assessment. The domain is listed as active in the current intelligence feed, meaning it is still reachable and potentially serving malicious content. Publicly available metadata does not include additional indicators such as SSL certificate details, HTTP response codes, page title, or any observed brand targeting. Consequently, the exact content hosted at the address remains unknown pending direct analysis.

Defenders should continue to block the domain at network perimeter devices and update endpoint protection signatures. Monitoring of DNS queries for the IP 188.114.97.3 and the host name is recommended, as well as periodic re‑scanning with VirusTotal or similar multi‑engine services to capture any changes in detection rates. Organizations that have observed traffic to this host should quarantine affected endpoints and investigate credential compromise, given the phishing classification.