klipai[.]gate-cryptolist[.]com

The domain klipai.gate-cryptolist.com was registered through Key-Systems GmbH on 17 June 2024. Its authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating Cloudflare DNS services. DNS resolution points to the IPv4 address 188.114.96.3, which is the sole hosting endpoint observed. The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

VirusTotal analysis shows that 13 of 91 scanning engines flag the domain as malicious, reinforcing the suspicion of phishing activity. The threat is classified as generic phishing with an elevated risk rating and an active status as of the report date, 29 July 2026. No public evidence of SSL certificate details, HTTP response codes, or page titles has been released, so the surface‑web characteristics remain unverified. Likewise, no additional intelligence such as OTX tags, Safe Browsing verdicts, or brand targeting has been disclosed.

Given the confirmed registrar information, Cloudflare name‑server usage, and the presence on a blocklist, defenders should proactively deny network connections to 188.114.96.3 and add klipai.gate-cryptolist.com to local and upstream DNS blacklists. Continuous monitoring of the IP address for any new hosting changes is advised, as well as periodic re‑scanning with VirusTotal or similar multi‑engine services to capture any evolution in detection rates. Organizations employing email or web filtering should ensure that the domain is included in their phishing‑prevention rule sets to mitigate credential‑harvesting attempts. Until further content analysis is available, the domain should be treated as a high‑confidence phishing indicator.