kaiko[.]gate-cryptolist[.]com

Analysis of kaiko.gate-cryptolist.com shows a newly registered domain created on June 17, 2024 that is currently active and classified as a generic phishing threat with an elevated risk rating. The domain resolves to the IP address 188.114.96.3 and is served through Cloudflare's infrastructure, as indicated by the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. Registration was handled by Key-Systems GmbH, a registrar that frequently appears in abuse reports, reinforcing the likelihood of malicious intent.

The domain is listed on a security blocklist, with one blocklist entry confirming its presence in threat intelligence feeds, and it is actively blocked by the PhishDestroy service, which specializes in phishing mitigation. VirusTotal scans have resulted in 13 of 91 security vendors flagging the domain, demonstrating a measurable level of detection across multiple anti‑malware engines. While the available data does not provide details on SSL certificates, HTTP response codes, or page content, the combination of recent registration, Cloudflare hosting, blocklist inclusion, and multi‑vendor detection constitutes strong evidence of phishing activity.

Defenders should add kaiko.gate-cryptolist.com to internal block lists, monitor DNS queries for the domain, and enforce sink‑hole or proxy controls to prevent user access. Continuous re‑evaluation is recommended, as additional indicators such as payload samples or phishing kit signatures may emerge in future scans.