btc-strategic-reserve[.]gate-cryptolist[.]com

Analysis indicates that btc-strategic-reserve.gate-cryptolist.com is an active phishing domain targeting cryptocurrency users. The domain was registered on June 17, 2024, through Key-Systems GmbH and currently resolves to IP address 188.114.96.3. Infrastructure analysis reveals Cloudflare nameservers (dale.ns.cloudflare.com and vera.ns.cloudflare.com), a common configuration for both legitimate and malicious domains. As of July 29, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy.

VirusTotal data shows 15 of 91 security vendors flagging this domain as malicious, though the absence of additional context limits conclusions about the specific nature of the threat. The domain name itself suggests a focus on Bitcoin-related phishing, potentially mimicking a cryptocurrency reserve or investment platform. However, the exact content of the site has not been analyzed, and no brand target or phishing kit has been confirmed in available intelligence. The risk level is classified as elevated due to the combination of cryptocurrency-themed naming, active blocklist presence, and vendor detections.

Defenders should treat this domain as malicious and consider blocking it at the DNS or proxy level. Further investigation into associated IP addresses, SSL certificates, and any linked infrastructure is recommended to identify related threats or campaigns. No evidence currently links this domain to broader threat actor activity, but its creation date and detection timeline suggest it remains operational.