mstr2100[.]ai-cryptolist[.]com

The domain mstr2100.ai-cryptolist.com has been identified as a generic phishing threat, specifically a crypto-themed phishing site impersonating the CRYPTOLIST brand. Currently, the domain is offline, having been taken down after its malicious activities were detected. This domain was created on April 11, 2026, and resolves to the IP address 188.114.96.3, which is associated with Cloudflare. It was registered through Key-Systems GmbH and bears an SSL certificate issued by Google Trust Services.

VirusTotal analysis reveals that 2 out of 95 security vendors flagged this domain as malicious, indicating a moderate but notable level of detection. The domain appears on one security blocklist, further confirming its risky nature. Despite the low blocklist count, the combination of a recently created domain (just days old at the time of analysis) and the phishing-oriented page title “CRYPTOLIST” strongly suggests an intent to harvest cryptocurrency credentials or seed phrases from unsuspecting users. The use of a generic top-level domain (.com) and a subdomain mimicking a legitimate crypto service (ai-cryptolist.com) are common tactics in crypto phishing campaigns.

Given these indicators, users should exercise extreme caution. Even though the domain is currently offline, similar phishing sites may reappear under different subdomains or variations. PhishDestroy recommends that users avoid interacting with any unsolicited links related to CRYPTOLIST or similar crypto platforms. Always verify the authenticity of cryptocurrency websites by double-checking the official domain and using trusted bookmarks. If you have already interacted with this domain, consider rotating your crypto wallet keys and enabling two-factor authentication on all associated accounts.