bobacat[.]entry-cryptolist[.]app

Analysis of bobacat.entry-cryptolist.app indicates the domain is currently active and associated with generic phishing activity. DNS resolution points to the IPv4 address 188.114.97.3, and the domain lacks publicly resolvable nameserver records, as the nameserver query returned NS_NOT_FOUND. Threat intelligence platforms have marked the domain as malicious: PhishDestroy has actively blocked it, and it appears on one external security blocklist.

VirusTotal scans show that 15 of 91 participating security vendors have flagged the domain as malicious, demonstrating a moderate consensus among detection engines. No additional context such as page title, SSL certificate details, HTTP response codes, registrar information, or Safe Browsing status is present in the supplied data set, leaving the full web‑service behavior uncharacterized. The limited visibility suggests that the infrastructure may be deliberately sparse to evade attribution, but the existing signals are sufficient for defensive action.

Recommendations for security teams include adding the domain and its resolved IP address (188.114.97.3) to network deny lists, updating DNS filtering rules to block any resolution attempts, and monitoring outbound traffic for connections to the IP. Continuous re‑evaluation of the domain on VirusTotal and other reputation services is advised, as additional detections may emerge. Organizations should also consider informing users about the potential risk and advising against any credential submission to URLs under this domain.