original-gangsters[.]gate-cryptolist[.]com

original-gangsters.gate-cryptolist.com was registered on 17 June 2024 through Key-Systems GmbH and is served from the Cloudflare nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.97.3, a host that is currently listed on a single security blocklist and has been actively flagged by the PhishDestroy mitigation service. VirusTotal scans show that 14 of 91 antivirus and URL‑reputation engines have classified the domain as malicious, indicating a consensus of moderate detection confidence.

The domain is currently categorized as a generic phishing site with an elevated risk rating and remains marked as active in threat‑intel feeds. The available evidence does not include a published page title, SSL certificate details, HTTP response codes, or any documented brand‑targeting information, so the precise content served by the site cannot be confirmed at this time. However, the combination of recent registration, Cloudflare hosting, detection by multiple security vendors, and inclusion on a phishing‑specific blocklist strongly supports the conclusion that the domain is being used to host credential‑harvesting or fraudulent pages.

Defenders should block or sinkhole the domain at the network perimeter, add 188.114.97.3 to host‑based deny lists, and ensure that any email or web filtering solutions incorporate the PhishDestroy blocklist entry. Continuous monitoring of the domain’s DNS records and reputation scores is recommended, as the infrastructure could be repointed to new IP addresses or additional aliases in the future. Organizations that have observed phishing attempts referencing the “gate‑cryptolist.com” suffix should treat this domain as a confirmed malicious actor and respond accordingly.