blockguard[.]gate-cryptolist[.]com

The domain blockguard.gate-cryptolist.com was registered on 17 June 2024 via Key-Systems GmbH and is currently hosted on the IP address 188.114.96.3. The authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating that the infrastructure is served through Cloudflare's DNS platform. VirusTotal has recorded detections from 15 of 91 scanning engines, confirming that a subset of security products consider the domain malicious. The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy feed, demonstrating that at least one anti‑phishing community has observed malicious activity associated with this host.

No public evidence of SSL certificate details, HTTP response codes, or page title has been released, and no Safe Browsing or Open Threat Exchange entries are currently cited. Consequently, the precise payload, credential‑harvesting technique, or targeted brand remains undefined. Defenders should treat blockguard.gate-cryptolist.com as a high‑confidence phishing indicator. Immediate mitigation steps include adding the domain to DNS‑based deny lists, configuring web‑proxy rules to block outbound connections to 188.114.96.3, and updating email security gateways to quarantine messages that reference the domain or its sub‑domains.

Continuous monitoring of Cloudflare name‑server activity and the associated IP address for new reputation changes is advised. Organizations should also consider sharing any observed traffic or email samples with threat‑intel sharing platforms to enrich community detection. Until further forensic analysis clarifies the exact phishing vector, a precautionary block is the most effective control.