yumiko-ai[.]gate-cryptolist[.]com

Analysis of yumiko-ai.gate-cryptolist.com shows the domain was registered on 17 June 2024 through Key-Systems GmbH and is currently served from the IP address 188.114.96.3. The authoritative name servers are dale.ns.cloudflare.com and vera.ns.cloudflare.com, indicating the zone is hosted on Cloudflare's network. VirusTotal scans have returned 12 positive detections out of 91 scanned security engines, confirming that multiple vendors consider the domain malicious. The domain is actively listed on the PhishDestroy blocklist and appears on one additional public blocklist, reinforcing its malicious reputation.

No public safe‑browsing verdicts or additional Intel such as OTX tags have been observed for this host. The page title, SSL certificate details, HTTP response codes and any observed content have not been disclosed, so the exact phishing landing page cannot be described at this time. Defenders should treat the host as hostile: network filtering should deny outbound connections to 188.114.96.3, DNS sinks should be configured to block resolution of yumiko-ai.gate-cryptolist.com, and existing security appliances that ingest blocklist feeds should be updated to include the domain.

Continuous monitoring of DNS query logs for this FQDN and correlation with user‑initiated traffic is recommended to detect any attempted credential harvesting. Incident response teams should also consider quarantine of any credentials that may have been submitted to the site, given its classification as a generic phishing platform. Because the infrastructure relies on Cloudflare, any evasion attempts may involve rapid DNS changes; therefore, periodic re‑validation of the domain's IP address and blocklist status is advisable.