jobless[.]entry-cryptolist[.]app

Domain jobless.entry-cryptolist.app was observed on July 29, 2026 and is currently classified as a generic phishing site with an elevated risk rating. The domain resolves to the IPv4 address 188.114.96.3. Independent threat‑intelligence sources list the domain on a single security blocklist and it is actively blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that 15 out of 91 scanned security vendors reported a detection, confirming malicious behavior consistent with phishing activity. The domain’s authoritative name server records could not be retrieved, indicating that the NS records are either missing or deliberately concealed.

No registrar information, creation date, or SSL certificate details are available in the current dataset, and HTTP response codes have not been recorded. Consequently, the full extent of the hosting infrastructure and any potential content served by the site remain uncertain. Because the domain does not appear in major Safe Browsing lists beyond the single blocklist, its visibility to end‑user browsers may be limited, but the presence on PhishDestroy suggests active exploitation. The lack of a resolvable NS record hampers typical DNS‑based reputation checks, so security teams should rely on IP‑centric controls. The observed detection rate of 15/91 on VirusTotal places the domain above the median detection threshold for known phishing infrastructure, reinforcing the recommendation for immediate containment.

Defenders should add the domain to local deny lists, enforce DNS‑level blocking, and monitor outbound connections to 188.114.96.3. Network traffic to the resolved IP should be inspected for credential‑harvesting payloads, and any alerts generated by endpoint detection products that reference the 15 VirusTotal detections should be investigated promptly.