janitor[.]gate-cryptolist[.]com

Analysis of the domain janitor.gate-cryptolist.com indicates that it is an active generic phishing infrastructure with an elevated risk rating. The domain was registered on June 17, 2024 through Key-Systems GmbH, and its authoritative nameservers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, suggesting the use of Cloudflare DNS services. DNS resolution points to the address 188.114.96.3, an IP that is presently listed on at least one security blocklist and is also associated with the PhishDestroy blocking service.

VirusTotal scans have returned detections from 13 of 91 security vendors, confirming that multiple independent scanners flag the domain as malicious. The domain appears on a single known blocklist, reinforcing the observation that threat intelligence communities have identified it as a suspect resource. No public SSL certificate details, HTTP response codes, or page title information are available at this time, limiting the ability to assess the site’s surface characteristics.

The lack of additional contextual data such as page content, brand impersonation, or specific phishing kit identifiers means that the full scope of the campaign cannot be precisely quantified. Defenders should continue to block traffic to the domain at network perimeters, update URL filtering policies to include the observed IP address, and monitor for any future sightings in additional blocklists or threat feeds. Continuous re‑evaluation is recommended as new intel may emerge, particularly if the domain begins to be referenced by additional security vendors or if its hosting infrastructure changes.