cavada[.]gate-cryptolist[.]com

This domain, cavada.gate-cryptolist.com, is currently flagged as a generic phishing site. The registration record shows it was created on 17 June 2024 through the registrar Key-Systems GmbH, and the authoritative nameservers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating Cloudflare DNS services. DNS resolution points to the IPv4 address 188.114.96.3, which is the sole host observed for this infrastructure. HTTP requests to the domain return a 200 OK status, confirming that a web service is actively responding.

The domain appears on one public security blocklist and is listed as blocked by the PhishDestroy service, providing additional evidence of malicious use. VirusTotal scans have returned 14 positive detections out of 91 submitted security vendors, reinforcing the suspicion that the site is being used for phishing. No further intelligence such as page title, SSL certificate details, or target brand has been disclosed, leaving the exact content and lure technique unverified. The lack of additional context means defenders cannot attribute a specific campaign or victim profile beyond the generic phishing classification.

Given the active hosting, positive blocklist entries, and multiple vendor detections, security teams should treat any traffic to this domain as malicious. Recommended mitigations include adding the domain to local deny lists, enforcing outbound web filtering rules that block the resolved IP address 188.114.96.3, and ensuring that endpoint protection solutions are updated to reflect the 14 VirusTotal detections. Continuous monitoring of the domain’s DNS records and any changes in its detection profile is advised, as the infrastructure may evolve or be leveraged for new phishing payloads.