doogle[.]entry-cryptolist[.]app

On July 29, 2026 the domain doogle.entry-cryptolist.app was catalogued as an elevated‑risk, active phishing infrastructure. DNS resolution returns a single A record pointing to 188.114.96.3, and the authoritative name server query yields no NS records (NS_NOT_FOUND), a pattern often observed in fast‑flux or deliberately obscured setups. The domain is currently listed on one external security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, indicating that at least one mitigation platform has taken automated action against it.

VirusTotal analysis shows that 13 of 91 scanned security vendors have raised a detection on the domain, providing independent confirmation of malicious intent. The threat type is recorded as generic phishing, but no additional context such as page title, targeted brand, or exploit kit is available from the intelligence feed. Consequently, the precise lure or credential‑harvesting mechanism remains unverified.

Defenders should prioritize immediate DNS and URL filtering for doogle.entry-cryptolist.app, enforce network‑level blocking of its resolved IP address, and monitor for any outbound connections to that host. Continued observation of the domain’s DNS behavior is advised, as the lack of NS records may evolve into a more sophisticated resolution strategy. Organizations using threat‑intelligence platforms should ingest the detection count and blocklist indicator to enrich their own detection rules, and incident response teams should treat any login attempts or credential submissions to this domain as compromised.