rwa-inc[.]gate-cryptolist[.]com

Analysis indicates that the domain rwa-inc.gate-cryptolist.com is actively used for malicious purposes and is classified as a phishing vector. The domain resolves to the IP address 188.114.96.3 and is hosted behind Cloudflare, as evidenced by its authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. Registration data shows the domain was created on June 17, 2024 and was registered through Key-Systems GmbH, providing a relatively short age that is typical for abuse infrastructure.

VirusTotal scans report that 14 of 91 security vendors have flagged the domain, suggesting a consensus of malicious intent among multiple detection engines. The domain is also listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the view that it is being used in phishing campaigns. The risk level has been assigned as elevated and the operational status is active, indicating ongoing exploitation.

No public page title, SSL certificate details, or HTTP response codes are available in the supplied intelligence, leaving the exact content and delivery mechanisms unverified. Defenders should treat the domain as hostile: block the domain at network perimeter and DNS resolvers, add the associated IP to host‑based deny lists, and monitor for any related traffic patterns. Continuous re‑evaluation is advised, as further analysis of the web payload could reveal additional indicators of compromise.