soleng[.]entry-cryptolist[.]app

On 2026-07-29 the domain soleng.entry-cryptolist.app was observed actively serving phishing content. Infrastructure analysis shows the domain resolves to the IPv4 address 188.114.96.3. The host name appears on a single security blocklist and is currently blocked by the PhishDestroy filtering service. VirusTotal has recorded 14 detections out of 91 scanned security vendors, indicating a moderate level of consensus among scanners that the domain is malicious.

Nameserver information could not be retrieved; the query returned NS_NOT_FOUND, which limits attribution of the hosting provider. The domain is classified as a generic phishing threat with an elevated risk rating and remains active at the time of reporting. No additional metadata such as SSL certificate details, HTTP response codes, or page‑title information are available in the current intelligence set, leaving the exact content of the landing page unverified.

Defensive operators should add soleng.entry-cryptolist.app to DNS‑based blocklists, configure web‑proxy filters to drop traffic to the associated IP 188.114.96.3, and monitor for any new resolution changes. Continuous re‑scanning with multi‑vendor services is advisable to capture any evolution in detection status, and any observed attempts to serve credential‑harvesting pages should be logged for incident response. The presence on a blocklist and the multi‑vendor detection count justify immediate precautionary measures despite the limited public detail.