exsat-network[.]gate-cryptolist[.]com

Analysis of exsat-network.gate-cryptolist.com shows that the domain was created on June 17, 2024 and is hosted on Cloudflare infrastructure, using the authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3. The registrar listed for the domain is Key-Systems GmbH, a known EU‑based registration service. Threat intelligence indicates that the domain is currently classified as a generic phishing site and is marked as elevated risk.

VirusTotal records reveal that 14 of 91 security vendors have flagged the domain as malicious, indicating a moderate level of detection across independent scanners. The domain is present on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service. No public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content and delivery mechanisms of the phishing page undefined.

Consequently, defenders lack visibility into the specific lure or credential‑harvesting technique employed. Given the confirmed detection by multiple vendors, the presence on a blocklist, and active blocking by PhishDestroy, it is advisable for security teams to add exsat-network.gate-cryptolist.com to URL filtering and DNS sinkhole policies, monitor any outbound connections to the associated IP, and continue to observe the domain for any changes in hosting or content. Until further forensic analysis of the landing page is available, the domain should be treated as a high‑confidence phishing indicator and blocked across enterprise perimeter defenses.