kimi-ai-agent[.]gate-cryptolist[.]com

Analysis of the domain kimi-ai-agent.gate-cryptolist.com indicates active malicious use consistent with a generic phishing campaign. The domain was registered on June 17, 2024 through Key-Systems GmbH and currently resolves to the IP address 188.114.96.3. Infrastructure observations show that the authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, suggesting the use of Cloudflare's DNS service for resilience.

The domain is presently listed on one security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one reputable anti‑phishing feed has identified it as hostile. VirusTotal scans report that 14 out of 91 security vendors have flagged the domain, providing additional corroboration of its malicious reputation. No further public intelligence such as Safe Browsing status, OTX mentions, or SSL certificate details is available at this time.

The lack of additional context, such as page title or observed content, leaves the exact phishing vector and targeted brand undefined; however, the existing indicators collectively warrant a high level of caution. Defenders should add the domain to internal block lists, enforce DNS filtering to prevent resolution, and monitor outbound traffic for connections to 188.114.96.3. Continuous re‑evaluation is advised, as future scans may increase detection counts or reveal additional indicators of compromise.