dkloud[.]gate-cryptolist[.]com

Analysis of the domain dkloud.gate-cryptolist.com indicates it is an active phishing site targeting cloud storage credentials. Registered on June 17, 2024, through Key-Systems GmbH, the domain remains operational as of July 29, 2026, with an HTTP status of 200, suggesting a live and accessible web page. Infrastructure analysis reveals Cloudflare nameservers (dale.ns.cloudflare.com and vera.ns.cloudflare.com) and resolution to IP address 188.114.96.3, a Cloudflare proxy endpoint commonly used to obscure hosting origins. The domain appears on one security blocklist and is flagged by PhishDestroy.

VirusTotal reports 14 of 91 security vendors marking this domain as malicious, though the specific detection categories (e.g., phishing, malware) are not detailed in available intelligence. No page title, brand target, or phishing kit details are provided, limiting confirmation of the exact content or impersonated service. However, the subdomain 'dkloud' suggests an attempt to mimic cloud storage platforms.

Defenders should treat this domain as high-risk due to its active status, Cloudflare obfuscation, and vendor detections. Recommended actions include blocking the domain at DNS and proxy levels, monitoring for connections to 188.114.96.3, and alerting users to avoid credential submission. Further investigation is required to determine the full scope of the phishing campaign, including any associated email or malvertising vectors.