yobi[.]entry-cryptolist[.]app

The domain yobi.entry-cryptolist.app is currently classified as an active generic phishing infrastructure with an elevated risk rating. Technical resolution shows the hostname points to the IPv4 address 188.114.96.3. DNS queries return no nameserver records, indicating NS_NOT_FOUND, which is a common tactic to hinder attribution and impede domain‑level remediation. VirusTotal analysis reports that 14 of 91 security vendors have flagged the domain, providing independent corroboration of malicious intent.

The domain is listed on a single public blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one anti‑phishing community considers it hostile. No additional telemetry such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are available in the supplied intelligence, leaving the exact payload and lure mechanisms unobservable. Consequently, defenders lack visibility into the specific phishing template or credential‑harvesting page that may be hosted at the address. Given the confirmed presence on a blocklist, the vendor detections, and the unresolved nameserver configuration, security teams should treat the domain as malicious.

Recommended actions include adding the hostname and its resolved IP (188.114.96.3) to outbound and inbound blocklists, updating intrusion‑detection signatures, and monitoring DNS logs for any future resolutions to the same IP or related suffixes. Organizations employing DNS sinkholing can redirect queries for yobi.entry-cryptolist.app to a controlled sinkhole to prevent end‑user exposure. Continuous re‑evaluation is advised, as additional indicators such as page content, SSL fingerprints, or new blocklist entries may emerge, refining the threat profile.