orochi-network[.]entry-cryptolist[.]app

This domain, orochi-network.entry-cryptolist.app, is actively resolving to the IPv4 address 188.114.97.3. The hosting infrastructure does not disclose authoritative name servers, as the nameserver query returned NS_NOT_FOUND. VirusTotal analysis has recorded detections from 12 of 91 scanning engines, indicating that a notable minority of security products classify the site as malicious. The domain is listed on a single public blocklist and is explicitly blocked by the PhishDestroy feed, confirming its presence in at least one anti‑phishing repository.

No additional metadata such as SSL certificate details, HTTP response codes, or page title information is available in the current intelligence set, leaving the visual content and exact phishing lure unknown. Given the observable indicators, the domain should be treated as a high‑confidence credential‑harvesting vector. Defenders should immediately add the domain and its resolved IP address to outbound filtering rules and internal blocklists. Network intrusion detection systems should be tuned to flag DNS queries for orochi-network.entry-cryptolist.app and traffic to 188.114.97.3.

Email security gateways should also inspect any messages that reference this domain, applying quarantine or reject actions. Continuous monitoring of the IP reputation and periodic re‑scans on VirusTotal are recommended to capture any changes in detection coverage. Because the page content has not been publicly harvested, analysts should consider sandboxing the URL in a controlled environment if further technical details are required. Until additional evidence is gathered, the domain remains an active threat that warrants proactive mitigation.