cloudyheart[.]gate-cryptolist[.]com

Analysis of the domain cloudyheart.gate-cryptolist.com shows that it was registered on 17 June 2024 through Key-Systems GmbH. The domain resolves to the IPv4 address 188.114.97.3 and serves HTTP responses with status code 200. DNS resolution is delegated to the Cloudflare nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating use of Cloudflare's DNS infrastructure. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one anti‑phishing feed has identified it as malicious.

VirusTotal has recorded 13 detections out of 91 scanned security vendors, reinforcing the suspicion of malicious activity. The current operational status is reported as active, meaning the site continues to be reachable. The available evidence points to a generic phishing campaign, although the specific luring content, target brand, or credential‑harvesting page has not been disclosed in the intelligence feed. No additional indicators such as SSL certificate details, page title, or content snapshots are present, leaving the exact phishing vector uncertain.

The combination of recent registration, active hosting, HTTP 200 response, Cloudflare DNS, blocklist presence, and multi‑vendor detections provides sufficient technical confidence to classify the domain as high‑risk. Defenders should add cloudyheart.gate-cryptolist.com to their deny lists, monitor DNS queries for the domain, and block outbound HTTP traffic to the associated IP address 188.114.97.3. Network intrusion detection signatures that flag connections to the listed Cloudflare nameservers may also help contain potential exposure. Continuous re‑evaluation is advised, as further threat intelligence, such as page content or additional vendor detections, could refine the risk posture.