reslv[.]xyz

Analysis indicates that the domain reslv.xyz was registered on March 11 2026 through Unstoppable Domains, Inc. The authoritative nameservers are arturo.ns.cloudflare.com and venus.ns.cloudflare.com, pointing to Cloudflare’s network (AS13335) with the IP address 104.21.10.188 located in the United States. The site returns HTTP 200 and presents the page title "Crypto Tools". The SSL certificate is issued by Google Trust Services under the WE1 root. Threat intelligence sources have observed the domain in 23 AlienVault OTX pulses and it appears on three public blocklists. Two of ninety‑four VirusTotal scanners have flagged the domain, and Gridinsoft assigns a trust score of 0/100. It is currently listed as blocked by PhishDestroy, MetaMask, and SEAL. The available evidence points to a high‑risk generic phishing operation, but the specific phishing content and targeted assets have not been publicly disclosed. Defenders should treat reslv.xyz as malicious, enforce network‑level denial or sink‑hole routing, and monitor DNS queries for the associated Cloudflare IP. Ongoing observation is recommended to capture any evolving payloads or credential‑stealing pages that may be deployed behind the "Crypto Tools" title.