jasper[.]entry-cryptolist[.]app

Analysis of jasper.entry-cryptolist.app as of 2026-07-29 indicates that the domain is actively used for generic phishing campaigns. DNS resolution returns the IPv4 address 188.114.97.3; a nameserver query returns NS_NOT_FOUND, suggesting that the authoritative name servers are either hidden or not correctly configured. VirusTotal reports that 15 out of 91 participating security vendors have marked the domain as malicious, providing a detection ratio of roughly 16 %. The domain is listed on a single external blocklist and is explicitly blocked by the PhishDestroy filtering service, confirming that at least one commercial anti‑phishing feed has recognized it as hostile infrastructure.

No public information on SSL certificates, HTTP response codes, page titles, Safe Browsing status, or Open Threat Exchange references is available in the current intelligence set, leaving those vectors unverified. The limited visibility into the hosting environment means that the broader IP reputation cannot be fully assessed, though the address 188.114.97.3 is presently reachable and may be shared with other malicious actors. Defenders should therefore treat traffic to and from this domain as high‑risk.

Recommended mitigation steps include adding jasper.entry-cryptolist.app to DNS‑based blocklists, enforcing outbound connection controls to the associated IP, and monitoring DNS query logs for repeated resolution attempts. Where possible, network sensors should be configured to alert on HTTP or TLS handshakes directed at the domain, and any observed credential submissions should be treated as compromised. Continuous re‑evaluation is advised, as additional intelligence such as SSL fingerprint or page content may emerge and refine the risk posture.