bitcoin-breaking-100-in-2013[.]gate-cryptolist[.]com

This domain is flagged as an active generic phishing infrastructure. The fully qualified domain name bitcoin-breaking-100-in-2013.gate-cryptolist.com was created on 17 June 2024 through the Key-Systems GmbH registrar. Authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating that the domain relies on Cloudflare’s DNS service. DNS resolution returns the IPv4 address 188.114.97.3, an address that belongs to Cloudflare’s edge network and is commonly leveraged by short‑lived malicious sites to hide the true hosting location.

The domain currently appears on one public security blocklist and is actively blocked by the PhishDestroy sink‑hole, providing early evidence of abuse. VirusTotal scans have recorded 14 positive detections out of 91 scanned engines, reinforcing the suspicion that the site hosts malicious content. No additional intelligence such as SSL certificate details, HTTP status codes, page title, Safe Browsing verdicts, or content snapshots is presently available, so the exact lure or credential‑stealing mechanism cannot be described at this time. The reliance on Cloudflare’s CDN complicates takedown efforts because the origin server is obscured behind a shared network.

Defenders should add the domain to internal blocklists, enforce DNS filtering, and ensure web proxies deny any HTTP(S) requests to the host. Monitoring of the IP address for changes in activity, as well as periodic rescans on VirusTotal and other sandbox services, is recommended. Incident response teams should be alerted to this indicator and correlate any user‑reported phishing attempts with the domain. Continued reconnaissance, including retrieval of the landing page content and analysis of any form fields, will help refine attribution, determine the targeted brand (if any), and improve detection rules for future campaigns.