lofitheyeti[.]entry-cryptolist[.]app

On July 29, 2026 the domain lofitheyeti.entry-cryptolist.app was recorded as a generic phishing infrastructure with an elevated risk rating. The domain resolves to the IPv4 address 188.114.96.3, and no authoritative nameserver records were returned during DNS queries, indicating that the nameserver configuration is either hidden or misconfigured. Threat intelligence shows that the domain has been blocked by the PhishDestroy service and appears on a single external security blocklist, suggesting that detection coverage is still emerging.

VirusTotal analysis reports that 12 out of 91 security vendors flagged the domain as malicious, providing a modest consensus of compromise. No additional information is available regarding the registrar, SSL certificate details, HTTP status codes, Safe Browsing verdicts, Open Threat Exchange entries, or page titles, leaving several aspects of the operational footprint uncertain. Defenders should immediately deny resolution of lofitheyeti.entry-cryptolist.app at DNS, proxy, or firewall layers, and add the associated IP address 188.114.96.3 to network deny lists.

Continuous monitoring for outbound connections to this address, as well as outbound DNS queries for the domain, is recommended. Organizations that observe related traffic or artifacts should contribute indicators to shared threat feeds and report incidents to PhishDestroy to improve collective detection. Ongoing verification of the domain's status is advised, as additional intelligence may emerge regarding its hosting environment or target brand.