doge-superbowl[.]gate-cryptolist[.]com

The domain doge-superbowl.gate-cryptolist.com was registered on June 17, 2024 through Key-Systems GmbH and is currently active. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to Cloudflare’s network and is served by the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. This hosting arrangement suggests the operator is leveraging Cloudflare’s CDN and DNS services to obscure the true origin of the payload and to benefit from the provider’s built‑in DDoS mitigation.

VirusTotal has recorded 14 detections out of 91 security vendors, indicating that a non‑trivial subset of scanners classify the domain as malicious. The domain is listed on a single external security blocklist and is actively blocked by the PhishDestroy service, reinforcing the perception of phishing intent. No additional public blocklist entries or Safe Browsing alerts are present in the supplied data.

The limited evidence set does not include a page title, SSL certificate details, HTTP response codes, or any observed payload characteristics, so the exact content served by the site remains unknown. Consequently, the precise phishing vector—whether credential harvesting, credential‑stealing redirects, or other social‑engineering tactics—cannot be confirmed at this time.

Given the elevated risk rating, the active status, and the concrete detection signals from multiple vendors, defenders should treat the domain as hostile. Recommended mitigations include adding the domain to network‑level deny lists, configuring email gateways to block URLs that resolve to the IP 188.114.96.3, and monitoring DNS queries for the Cloudflare nameservers used. Continuous re‑analysis is advised to capture any changes in page content, SSL usage, or additional detection counts that may clarify the phishing methodology employed.