bongo-cat[.]entry-cryptolist[.]app

Analysis as of July 29, 2026 indicates that the domain bongo-cat.entry-cryptolist.app is actively being used for a generic phishing campaign. The domain resolves to the IP address 188.114.96.3, which is hosted on a service that does not provide publicly visible nameserver records; the nameserver query returned NS_NOT_FOUND. VirusTotal has recorded 15 of 91 security vendors flagging the domain, confirming that a subset of scanners consider it malicious. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy mitigation service. The presence on only one public blocklist suggests limited exposure, but the vendor consensus on VirusTotal demonstrates a non‑trivial risk.

No additional infrastructure details such as ASN, geographic location, SSL certificate information, or HTTP response codes have been published in the current intelligence set. Consequently, the broader hosting environment and potential shared infrastructure remain uncertain. The lack of publicly available SSL certificate data prevents verification of HTTPS usage, and the missing HTTP status code leaves the response behavior unknown. No evidence of a page title or targeted brand has been disclosed, so the phishing lure cannot be correlated to a known campaign. Registration details, including registrar and creation date, are not part of the current feed, further limiting attribution.

Defenders should add the domain to deny lists and enforce DNS‑level blocking, as it is already recognized by PhishDestroy. Monitoring of the associated IP address 188.114.96.3 for new hostnames or changes in reputation is advised. Since the domain is flagged by multiple vendors on VirusTotal, security solutions that incorporate vendor feeds should treat any traffic to or from the domain as high‑risk.