cycleanplatform[.]gate-cryptolist[.]com

cycleanplatform.gate-cryptolist.com is observed as an active generic phishing infrastructure. The domain was registered on 17 June 2024 through the registrar Key-Systems GmbH and currently resolves to the IPv4 address 188.114.96.3. DNS resolution is delegated to the Cloudflare authoritative nameservers dale.ns.cloudflare.com and vera.ns.cloudflare.com. An HTTP GET request to the root of the site returns a 200 OK status, confirming that the web server is operational.

The domain is listed on a single security blocklist and is specifically identified by the PhishDestroy feed, which classifies it as a phishing resource. VirusTotal scanning reports that 13 of 91 security vendors flag the domain as malicious, providing independent corroboration of its malicious intent. The intelligence set does not contain page title, SSL certificate details, Safe Browsing alerts, OTX identifiers, or additional blocklist entries, leaving the exact content of the hosted page unverified at this time.

The assigned risk level is high and the operational status is marked active, reflecting the combination of active hosting, blocklist inclusion, and multi‑vendor detection. Defensive guidance advises immediate addition of the domain to network perimeter deny lists, DNS sinkhole or resolver blocking, and outbound traffic monitoring for connections to 188.114.96.3. Organizations should also incorporate the domain into security information and event management (SIEM) correlation rules and periodically re‑evaluate the indicator, as hosting characteristics and detection coverage may evolve.