crypto-strategic-reserve[.]entry-cryptolist[.]app

This domain, crypto-strategic-reserve.entry-cryptolist.app, is currently flagged as an active crypto-themed phishing site. Analysis indicates elevated risk due to infrastructure and detection patterns. The domain resolves to IP address 188.114.97.3, which is associated with Cloudflare's network, a common hosting choice for both legitimate services and malicious campaigns seeking to obscure origin infrastructure. At present, 12 of 91 security vendors on VirusTotal have classified this domain as malicious, a detection rate that exceeds typical benign thresholds and suggests coordinated phishing activity. The domain appears on at least one security blocklist, specifically PhishDestroy, which has proactively blocked access. Nameserver configuration is anomalous, with the domain returning NS_NOT_FOUND, indicating either misconfiguration or deliberate evasion of standard DNS resolution processes.

This absence of registered nameservers may hinder passive DNS analysis and delay takedown efforts. No registrar or registration date details are available in the current intelligence, limiting temporal analysis of the domain's lifecycle. The lack of Safe Browsing or Open Threat Exchange (OTX) data prevents cross-validation with additional threat intelligence platforms. SSL certificate details, HTTP response status, and page content have not been analyzed, so the exact phishing lure—whether posing as a crypto wallet, exchange, or reserve fund—remains unconfirmed. However, the domain name itself incorporates terms commonly exploited in crypto scams, including 'strategic reserve' and 'crypto,' which are frequently used to lend false legitimacy to fraudulent investment or giveaway schemes.

Defenders should treat this domain as actively hostile. Network-level blocking is recommended for the domain and its resolving IP. Security teams are advised to monitor for connections to 188.114.97.