cata-bsc[.]entrance-cryptolist[.]com

On July 29, 2026, the domain cata-bsc.entrance-cryptolist.com was identified as part of an elevated‑risk generic phishing infrastructure. The domain was registered on June 17, 2024 through Key‑Systems GmbH and is served by Cloudflare name servers daisy.ns.cloudflare.com and sri.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.97.3, an address currently associated with Cloudflare’s edge network, which is frequently leveraged by malicious operators to obscure the true hosting location. VirusTotal analysis shows that 15 of 91 scanned security vendors flagged the domain, indicating a moderate consensus of malicious intent.

The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has observed malicious activity originating from this host. No public SSL certificate details, HTTP response codes, or page title information have been released, leaving the surface‑web characteristics of the site unverified. Consequently, the precise content served to victims remains unknown, though the classification as generic phishing suggests the site likely attempts to harvest credentials or personal data.

The combination of recent registration, use of Cloudflare’s infrastructure, detection by multiple vendors, and inclusion on blocklists justifies the elevated risk rating. Defenders should add cata-bsc.entrance-cryptolist.com to DNS and proxy block lists, monitor outbound connections to 188.114.97.3, and enforce strict email filtering for any communications that reference the domain or its sub‑domains. Continuous re‑evaluation is advised, as further intelligence such as SSL details, HTTP behavior, or observed payloads may emerge.