flare-ai[.]gate-cryptolist[.]com

Analysis indicates that the domain flare-ai.gate-cryptolist.com is actively being used in a phishing campaign. The domain was registered on June 17, 2024 through Key-Systems GmbH and is hosted on the IP address 188.114.96.3. Cloudflare serves as the authoritative DNS provider, with the nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com listed in the WHOIS record.

VirusTotal has recorded detections from 14 of 91 scanned security vendors, demonstrating that multiple anti‑malware engines have flagged the domain as malicious. The domain currently appears on one public security blocklist and has been explicitly blocked by the PhishDestroy filtering service, confirming that security operators have observed malicious activity originating from this host. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is available at this time, so the precise phishing payload and targeted brand remain unidentified.

Defenders are advised to add flare-ai.gate-cryptolist.com to network‑level deny lists, block outbound connections to its hosting IP 188.114.96.3, and monitor for related traffic patterns. Continuous observation of the associated IP and any newly created sub‑domains should be performed, as threat actors often pivot to additional infrastructure. Organizations should also consider sharing any observed indicators of compromise with threat‑sharing platforms to aid broader community detection efforts.