broccoli-4[.]gate-cryptolist[.]com

The domain broccoli-4.gate-cryptolist.com is currently flagged as active with an elevated risk rating. Registration data shows the domain was created on 17 June 2024 through the registrar Key-Systems GmbH. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating the use of Cloudflare's DNS infrastructure. The domain appears on a single security blocklist and has been blocked by the PhishDestroy sinkhole, confirming that at least one remediation service has observed malicious activity originating from this host.

VirusTotal analysis shows that 15 of 91 scanned security vendors have reported the domain as malicious, providing independent corroboration of its phishing nature. No additional public reputation services, such as Google Safe Browsing or OTX, have been disclosed in the available intelligence. Similarly, details on SSL certificate presence, HTTP response codes, or page title have not been published, leaving the content of the site unverified. Given the limited but consistent evidence—registration age of just over two years, Cloudflare DNS, a single blocklist entry, and multi‑vendor detection—the domain should be treated as a confirmed phishing infrastructure.

Defenders should add the domain and its resolved IP address 188.114.97.3 to outbound and inbound deny lists, monitor DNS queries for the associated Cloudflare name servers, and ensure that any internal email or web traffic filtering solutions incorporate the blocklist entry. Because the page title and HTTP behavior are unknown, further investigation, such as sandbox retrieval of the landing page, is recommended to identify the specific phishing lure. Continuous re‑evaluation is advised in case additional indicators, such as SSL fingerprints or HTTP signatures, become available.