debridge[.]gate-cryptolist[.]com

Analysis of the domain debridge.gate-cryptolist.com indicates an active phishing infrastructure as of July 29, 2026. The domain was registered on June 17, 2024 through Key-Systems GmbH, a registrar known for handling bulk registrations. DNS resolution points to the IP address 188.114.96.3, hosted on Cloudflare’s network as evidenced by the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. An HTTP request to the host returns a 200 status code, confirming that a web service is reachable.

Threat intel feeds have placed the domain on a single security blocklist and it is explicitly blocked by the PhishDestroy platform, reflecting recognition by anti‑phishing operators. VirusTotal scans show that 14 of 91 security vendors have flagged the domain, providing multi‑vendor corroboration of malicious intent. No public page title or brand‑targeting information is available, so the exact victim lure remains undefined.

The current operational state is listed as active, and the domain continues to resolve to the same IP without observed changes. Defenders should prioritize adding debridge.gate-cryptolist.com and its resolve IP 188.114.96.3 to outbound and inbound filtering rules, monitor DNS queries for the Cloudflare nameservers, and consider sharing the indicator set with threat‑sharing communities. Continuous re‑evaluation is advised, as further payload or credential‑harvesting pages could be deployed without prior notice.