mstr[.]ac

This domain, mstr.ac, was registered on 21 February 2026 through Web Commerce Communications Limited and points to the Cloudflare edge address 172.67.218.78, which is associated with ASN 13335 in the United States. The authoritative name servers are harlan.ns.cloudflare.com and shaz.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate was observed, and the site is currently taken offline, suggesting that the malicious content has been removed or the infrastructure has been disrupted. The page title that was retrieved before takedown reads “Biggest CRYPTO giveaway of $100,000,000”, which aligns with a high‑value cryptocurrency‑giveaway lure commonly used to attract victims.

VirusTotal recorded 13 positive detections out of 95 scanned engines, and the domain appears on three independent security blocklists. It has also been listed by the PhishDestroy, MetaMask, and SEAL filtering services, confirming that multiple anti‑phishing and wallet‑protection products consider the domain malicious. The lack of an SSL certificate further reduces trust signals and may trigger browser warnings. The evidence indicates a high‑risk profile despite the current offline state; the underlying infrastructure (Cloudflare IP range) is shared with many legitimate services, so simple IP‑based blocking could produce false positives.

Defenders should proactively add mstr.ac to domain‑based deny lists, monitor for re‑registration or similar‑looking subdomains, and apply URL‑filtering rules that flag any page with the exact title “Biggest CRYPTO giveaway of $100,000,000”. Network security appliances should be configured to drop traffic to the associated IP only when the HTTP Host header matches mstr.ac, to avoid collateral impact.