bobaoapp[.]com[.]cn

Analysis of bobaoapp.com.cn as of August 7, 2026, indicates this domain is actively flagged for phishing activity targeting app store users. The domain is registered through 北京新网数码信息技术有限公司, a registrar frequently associated with suspicious infrastructure in China. It currently resolves to the IP address 94.154.43.8, which has been linked to other low-reputation domains in recent threat intelligence reports. At least one security blocklist, PhishDestroy, has explicitly blocked this domain, and 15 of 91 security vendors on VirusTotal have flagged it as malicious, suggesting a pattern of detection across multiple engines.

Infrastructure checks reveal no SSL certificate anomalies or unusual HTTP response codes, but the domain's hosting environment remains a point of concern. The IP 94.154.43.8 is not tied to a major cloud provider, which is atypical for legitimate app distribution platforms. No brand name or specific phishing kit has been confirmed in available metadata, though the domain name itself suggests an attempt to mimic an application storefront. The exact nature of the content hosted on bobaoapp.com.cn is not yet analysed, so it is unclear whether it targets a specific brand or operates as a generic fraudulent app repository.

Defenders should treat this domain as high-risk for phishing. Network-level blocking is recommended based on current detections, and users encountering this domain should avoid downloading any files or entering credentials. Further investigation into the hosting provider and associated domains on 94.154.43.8 may reveal additional compromised infrastructure. Given the elevated risk level and active status, monitoring for changes in detection volume or new blocklist additions is advised.