suilama[.]gate-cryptolist[.]com

Analysis of suilama.gate-cryptolist.com shows a newly registered domain (created 17 June 2024) that is part of the gate-cryptolist.com sub-zone. Registration was performed through Key-Systems GmbH, a registrar commonly used for legitimate services, but the domain points to IP 188.114.97.3, which is hosted behind Cloudflare's network as indicated by the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. The presence of Cloudflare suggests the operator is leveraging a CDN and DNS protection service to obscure the true origin of the traffic.

The domain is listed on a single security blocklist and is actively blocked by PhishDestroy, demonstrating that at least one anti‑phishing repository has identified malicious activity associated with the host. VirusTotal scans have returned 13 positive detections out of 91 scanners, confirming that multiple security vendors consider the domain malicious. No additional public intelligence such as Safe Browsing reports, OTX tags, SSL certificate details, or HTTP response codes is available in the current dataset, leaving the exact payload and impersonated brand undefined.

Given the limited but consistent indicators—recent creation, Cloudflare fronting, blocklist entry, and multi‑vendor detection—the domain should be treated as an active phishing threat. Defenders are advised to add 188.114.97.3 and the full hostname to network‑level deny lists, enforce URL filtering rules that block the domain, and monitor DNS queries for similar sub‑domains under gate-cryptolist.com. Continuous re‑evaluation is recommended as further content analysis or victim reports become available.