# PhishDestroy domain threat record: mosordrop.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/mosordrop.com/
Machine-readable companion: https://phishdestroy.io/domain/mosordrop.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 21:35:17 UTC
- Last availability or vendor check: 2026-10-26 00:20:47 UTC
- Stored record updated: 2026-10-26 00:20:47 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: cs2

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-19 22:20:40 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a174fb-718f-743c-9d1e-bae350746986/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/mosordrop.com
- Certificate Transparency search: https://crt.sh/?q=%25.mosordrop.com
- Web Archive lookup: https://web.archive.org/web/*/https://mosordrop.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added mosordrop.com to its internal blocklist on 2026-10-25 after an admin report noted the domain was only five days old. The recorded page title reads “MUSOR Drop (МУСОР ДРОП) - Официальный Сайт :: КС2 Кейсы и Апгрейды”, describing a Russian‑language storefront for CS2 case openings. An HTTP GET on 2026-10-25 returned status code 200, indicating the page was reachable at that time. A prior automated assessment on the same day classified the site as clean, but the intake triggered a suspicious listing.

How the scam works
The listing does not confirm any particular fraud technique; it merely flags a newly created domain that presents a gaming‑related storefront. Such pages can be used to lure users into submitting account credentials, payment details, or to redirect them to malicious services, although no such behavior was observed on this site.

Evidence
VirusTotal scanned the domain on 2026-10-20 (analysis date) with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked on 2026-10-25 and did not flag the site, while OTX recorded four pulses referencing mosordrop.com as of the same date. URLScan’s machine‑learning engine assigned a malicious score of 96 on 2026-10-25, but its overall verdict was non‑malicious, and Cloudflare Radar flagged the domain for phishing and labeled it a newly seen domain with security risks. PhishDestroy’s internal blocklist marks the domain as listed, and external blocklist checks on 2026-10-25 found no hits.

Infrastructure
The domain was registered on 2026-10-20 with NICENIC INTERNATIONAL GROUP CO., LIMITED and is served through Cloudflare’s network in Great Britain, recording IPv4 188.114.97.3 and IPv6 2a06:98c1:3120::3. TLS is provided by Let’s Encrypt, valid from 2026-10-20 to 2027-01-18, and DNSSEC is not enabled.

What to do
Visitors should avoid entering login credentials, payment information, or personal data on mosordrop.com and treat any offers as potentially fraudulent. If credentials were submitted, change the associated passwords and review account activity. Organizations can block the domain at firewalls or proxies and monitor outbound connections to the recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a174fb-718f-743c-9d1e-bae350746986/
Cloudflare Radar report: https://radar.cloudflare.com/scan/76a074b8-828a-4733-90c7-b98b4a8c65ba
Stored capture screenshot: https://i.ibb.co/cc4j5Hkd/d39d02231917.png
Cloudflare Radar screenshot (2026-10-25T21:36:34Z): https://screenshots.phishdestroy.io/cf/76a074b8-828a-4733-90c7-b98b4a8c65ba.png
URLScan screenshot (2026-10-25T21:36:53Z): https://screenshots.phishdestroy.io/us/01a174fe-3c25-73fe-9866-5bd5f85681af.png
URLScan capture report: https://urlscan.io/result/01a174fe-3c25-73fe-9866-5bd5f85681af/
VirusTotal report: https://www.virustotal.com/gui/domain/mosordrop.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=mosordrop.com
Archived copy: https://web.archive.org/web/20261025213621/https://mosordrop.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 22:08:26 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/cc4j5Hkd/d39d02231917.png
  Captured: 2026-10-25 21:35:17 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a174fb-718f-743c-9d1e-bae350746986.png
  Captured: 2026-10-25 21:35:17 UTC
  Source report: https://urlscan.io/result/01a174fb-718f-743c-9d1e-bae350746986/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/76a074b8-828a-4733-90c7-b98b4a8c65ba.png
  Captured: 2026-10-25 21:36:34 UTC
  Source report: https://radar.cloudflare.com/scan/76a074b8-828a-4733-90c7-b98b4a8c65ba
  SHA-256: 21a58198717fa31c8c243ab0cb1443139955def6590ef668f886c840209fbb39
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a174fe-3c25-73fe-9866-5bd5f85681af.png
  Captured: 2026-10-25 21:36:53 UTC
  Source report: https://urlscan.io/result/01a174fe-3c25-73fe-9866-5bd5f85681af/
  SHA-256: 33b50176afc88c284cabb7e339b3de45e492e78e58735f6e508e901d78542f2b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T21:38:53Z",
        "uuid": "01a174fb-718f-743c-9d1e-bae350746986",
        "scanned_at": "2026-10-25T21:33:39Z",
        "final_url": "https://mosordrop.com/",
        "status": 200,
        "ip": "2a06:98c1:3121::3",
        "ips": [
            "188.114.97.3",
            "2a06:98c1:3121::3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "fd3c35e2b3c62ca6cb88543d04c7a551ce2f240800d3aae1a6f04cc0bb3f1e57",
        "script_hashes": [
            "c5b7c5503108d036d1ae8edbe9bc3c704dcaebafd7bb036badb277b01bfc26d8"
        ],
        "globals": [
            "closeModal",
            "openModal",
            "goToLogin",
            "randomizeOnline",
            "LOGIN_LINK",
            "modal",
            "closeBtn",
            "actions"
        ],
        "tls": {
            "san": [
                "*.mosordrop.com",
                "mosordrop.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "mosordrop.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T00:11:20Z",
            "valid_from": "2026-10-20T00:11:21Z"
        },
        "domain_age_days": 4,
        "apex_age_days": 4,
        "tls_age_days": 5,
        "tls_valid_days": 89,
        "requests": 134,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T21:38:54Z",
        "uuid": "76a074b8-828a-4733-90c7-b98b4a8c65ba",
        "scanned_at": "2026-10-25T21:36:34Z",
        "final_url": "https://mosordrop.com/",
        "status": 200,
        "history": [
            {
                "url": "https://mosordrop.com/",
                "status": 200
            }
        ],
        "dom_hash": "26cf1732a57423f8455e81f7289f883f5117d2b3913935aedd7942c87e926d70",
        "doc_hash": "8b8b71c5e3d9fe8c8ca88a9b497ed7dffcdf8c486b07de788a5ac25c1aec12db",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "mosordrop.com",
                "type": "A",
                "value": "172.67.151.211"
            },
            {
                "name": "mosordrop.com",
                "type": "A",
                "value": "104.21.57.238"
            },
            {
                "name": "mosordrop.com",
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:97d3"
            },
            {
                "name": "mosordrop.com",
                "type": "AAAA",
                "value": "2606:4700:3035::6815:39ee"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.151.211",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-20T00:20:40Z",
            "updated": "2026-10-20T00:20:41Z",
            "expires": "2027-10-20T00:20:40Z",
            "nameservers": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T22:06:23Z",
        "analysis_at": "2026-10-20T07:30:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 0,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 92
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-20T00:20:41Z",
        "expires": "2027-10-20T00:20:40Z",
        "updated": "2026-10-20T00:20:41Z",
        "first_seen": "2026-10-20T07:30:35Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "olga.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::6815:39ee"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "olga.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "sonny.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.151.211"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.57.238"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:97d3"
            }
        ],
        "dns_at": "2026-10-20T07:30:35Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.mosordrop.com",
                "mosordrop.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5ab422b3b96a6737be240f4cc246db46af",
            "sha256": "c4e7e5baae3a01957e80f0be870665dfd780cb22349debf6eddfdc6ede3aeecc",
            "subject": "mosordrop.com",
            "valid_to": "2027-01-18T00:11:20Z",
            "valid_from": "2026-10-20T00:11:21Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-20T00:20:40Z",
            "updated": "2026-10-20T00:20:41Z",
            "expires": "2027-10-20T00:20:40Z",
            "status": [
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-20T00:20:40Z",
                "registration": "2026-10-20T00:20:41Z",
                "registrar expiration": "2027-10-20T00:20:40Z",
                "last update of RDAP database": "2026-10-20T00:20:41Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T21:39:16Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "mosordrop.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T21:36:21Z",
            "first": "2026-10-25T21:36:21Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 56999
        },
        "social_tags": {
            "title": "MUSOR Drop (МУСОР Дроп) - Официальный Сайт :: КС2 Кейсы и Апгрейды",
            "robots": "index, follow",
            "ogTitle": "Musor Drop",
            "keywords": "кейсы cs2, открыть кейс cs2, кейсы кс2, кейсы кс го, скины cs2, апгрейд скинов cs2, контракты cs2, дроп cs2, честные кейсы, musor drop, мусор дроп",
            "description": "Открывай кейсы CS2 на MUSOR DROP: высокие выигрыши, RTP 98% и самые честные шансы на дорогие скины. Апгрейды, контракты, мгновенный вывод в Steam.",
            "twitterCard": "summary",
            "ogDescription": "Открывай кейсы CS2 на MUSOR DROP: высокие выигрыши, RTP 98% и самые честные шансы на дорогие скины. Апгрейды, контракты, мгновенный вывод в Steam."
        },
        "trackers": {
            "requests": 119
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 22,
                "wait": 459,
                "connect": 7,
                "download": 39
            },
            "response_ms": 529
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 1062190,
            "co2_grams": 0.0389,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.66",
                    "host": "sonny.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.137",
                    "host": "olga.ns.cloudflare.com"
                }
            ],
            "zone": "mosordrop.com"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "mosordrop.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"olga.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418221635, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://mosordrop.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://musor2.win/containers",
                "https://musor2.win/upgrader",
                "https://musor2.win/",
                "https://musor2.win/bonuses",
                "https://musor2.win/contracts",
                "https://musor2.win/containers/92",
                "https://musor2.win/containers/93",
                "https://musor2.win/containers/89",
                "https://musor2.win/containers/91",
                "https://musor2.win/containers/90",
                "https://musor2.win/containers/2",
                "https://musor2.win/containers/85",
                "https://musor2.win/containers/3",
                "https://musor2.win/containers/4",
                "https://musor2.win/containers/5",
                "https://musor2.win/containers/6",
                "https://musor2.win/containers/106",
                "https://musor2.win/containers/7",
                "https://musor2.win/containers/8",
                "https://musor2.win/containers/9",
                "https://musor2.win/containers/10",
                "https://musor2.win/containers/11",
                "https://musor2.win/containers/12",
                "https://musor2.win/containers/13",
                "https://musor2.win/containers/14"
            ],
            "external_count": 102
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-20T00:20:40Z",
            "updated": "2026-10-20T00:20:41Z",
            "expires": "2027-10-20T00:20:40Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```