ghibli-elon[.]gate-cryptolist[.]com

This domain, ghibli-elon.gate-cryptolist.com, is flagged as an active crypto-themed phishing site based on infrastructure analysis and threat intelligence data. Registered on June 17, 2024, through Key-Systems GmbH, the domain currently resolves to IP address 188.114.96.3, hosted on Cloudflare nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. As of July 29, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal detections indicate that 14 of 91 security vendors classify this domain as malicious, providing concrete evidence of its elevated risk status.

The domain name includes terms like 'elon' and 'crypto,' suggesting an attempt to exploit interest in cryptocurrency or high-profile figures associated with it, though the exact content and target brand remain unconfirmed without further page analysis. The use of Cloudflare nameservers is common among both legitimate and malicious domains, but the combination of detection vendor flags and blocklist inclusion supports the classification of this domain as a confirmed phishing site. No SSL certificate details or HTTP status codes are provided in the available data, limiting further assessment of its operational state. Defenders should treat this domain as a confirmed threat and implement blocking measures at the DNS or network level.

Given the domain's age and persistent detections, it is likely part of an ongoing phishing campaign. Organizations are advised to monitor for any connections to 188.114.96.3 and review logs for interactions with this domain or its associated infrastructure. If additional intelligence becomes available, such as page content or campaign attribution, further analysis may refine the threat classification.