prolific-game-studio[.]gate-cryptolist[.]com

Prolific-game-studio.gate-cryptolist.com was first observed on June 17 2024 when it was registered through Key-Systems GmbH. The domain is delegated to Cloudflare nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com and resolves to the IP address 188.114.96.3, which is part of a Cloudflare edge network. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy sinkhole. VirusTotal reports that 13 of 91 scanning engines have generated a malicious verdict, indicating that a subset of security products classify the host as malicious.

No additional public analysis such as page title, SSL certificate details, or HTTP response codes is currently available, leaving the exact content and targeted brand undetermined. The combination of recent registration, use of reputable DNS hosting, and early detection by multiple vendors suggests an intentional infrastructure set up for credential‑stealing or fraudulent login collection. The limited blocklist presence (one list) and modest detection count imply that the campaign may be in an early deployment phase or targeting a niche audience.

Defenders should add the domain and its resolving IP to perimeter deny lists, monitor DNS queries for the Cloudflare nameservers, and consider tightening outbound filtering for traffic to the 188.114.96.3 address. Continued observation of VirusTotal submissions and any emerging threat‑intel feeds is recommended to capture potential escalation, such as the appearance of additional blocklist listings or an increase in vendor detections. Until further forensic analysis of the web payload is released, the domain should be treated as high‑risk for credential‑theft activity.