# PhishDestroy domain threat record: musor.cfd

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/musor.cfd/
Machine-readable companion: https://phishdestroy.io/domain/musor.cfd/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-28 07:09:41 UTC
- Last availability or vendor check: 2026-10-28 12:31:33 UTC
- Stored record updated: 2026-10-28 12:31:33 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: counter-strike

## Stored infrastructure

- Observed IP address: 5.104.72.144
- Registrar in stored WHOIS data: Hosting Concepts B.V. d/b/a Registrar.eu
- Registrar country in stored WHOIS data: TW
- Registration date in stored WHOIS data: 2026-10-05 16:41:35 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a18157-13f2-7338-8ccf-f9e352586e1d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/musor.cfd
- Certificate Transparency search: https://crt.sh/?q=%25.musor.cfd
- Web Archive lookup: https://web.archive.org/web/*/https://musor.cfd/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed musor.cfd because it is a newly registered domain (22 days old) that matches our automatic young‑domain rule. The intake AI previously assessed the site as clean, noting that the page describes itself as an informational resource about CS2 cases and explicitly states it does not offer case opening, top‑ups, upgrades, or exchanges. The domain was first seen by PhishDestroy on 2026-10-28 and returned an HTTP 200 response on that date.

How the scam works
The current listing does not demonstrate a specific scam mechanism; it only indicates that the domain is considered suspicious due to its age and lack of known benign reputation. In general, newly created sites may be used for phishing, fraudulent offers, or credential harvesting, but no such behavior was observed on the recorded page.

Evidence
VirusTotal scanned the domain on 2026-10-21 (retrieved 2026-10-28) and reported zero malicious or suspicious detections from 92 engines. Google Safe Browsing checked on 2026-10-28 and did not flag the site. URLScan captured the site on 2026-10-28; its machine‑learning engine assigned a high malicious score (93) but the overall verdict was non‑malicious. No OTX pulses were found, and external blocklists reported zero hits while PhishDestroy’s internal list includes the domain.

Infrastructure
The recorded registration date was 2026-10-05 through Hosting Concepts B.V. d/b/a Registrar.eu. The recorded IP was 5.104.72.144, which at the time was associated with Clouvider Limited in Canada, and the domain used Cloudflare nameservers. The TLS certificate observed was issued by Let’s Encrypt / YR2 for musor.icu and was valid until 2027-01-17.

What to do
Visitors should treat musor.cfd as suspicious and avoid entering any credentials, payment information, or personal data. If any sensitive information was submitted, change related passwords and monitor accounts for unexpected activity. Defenders can block the exact domain, log any connections, and keep the domain on internal watchlists.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a18157-13f2-7338-8ccf-f9e352586e1d/
Cloudflare Radar report: https://radar.cloudflare.com/scan/ec285653-9754-416c-8998-1508d59561c2
Stored capture screenshot: https://i.ibb.co/bgChKHhg/e3ca06102f35.png
Cloudflare Radar screenshot (2026-10-28T07:10:06Z): https://screenshots.phishdestroy.io/cf/ec285653-9754-416c-8998-1508d59561c2.png
URLScan screenshot (2026-10-28T07:00:34Z): https://screenshots.phishdestroy.io/us/01a1814f-67c9-7148-a671-45fb47773cf7.png
URLScan capture report: https://urlscan.io/result/01a1814f-67c9-7148-a671-45fb47773cf7/
URLScan screenshot (2026-10-28T07:03:52Z): https://screenshots.phishdestroy.io/us/01a18152-6c21-740b-9c8f-3e255e35e6a8.png
URLScan capture report: https://urlscan.io/result/01a18152-6c21-740b-9c8f-3e255e35e6a8/
VirusTotal report: https://www.virustotal.com/gui/domain/musor.cfd
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=musor.cfd
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-28 07:11:09 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/bgChKHhg/e3ca06102f35.png
  Captured: 2026-10-28 07:09:41 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a18157-13f2-7338-8ccf-f9e352586e1d.png
  Captured: 2026-10-28 07:09:41 UTC
  Source report: https://urlscan.io/result/01a18157-13f2-7338-8ccf-f9e352586e1d/
- URLScan · 2026-10-28: https://screenshots.phishdestroy.io/us/01a1814f-67c9-7148-a671-45fb47773cf7.png
  Captured: 2026-10-28 07:00:34 UTC
  Source report: https://urlscan.io/result/01a1814f-67c9-7148-a671-45fb47773cf7/
  SHA-256: ac917cb77b1aaceb225ad6a487b0e3ec42ebf6c93e84b7cc01131b7b699cd3ae
- URLScan · 2026-10-28: https://screenshots.phishdestroy.io/us/01a18152-6c21-740b-9c8f-3e255e35e6a8.png
  Captured: 2026-10-28 07:03:52 UTC
  Source report: https://urlscan.io/result/01a18152-6c21-740b-9c8f-3e255e35e6a8/
  SHA-256: ac917cb77b1aaceb225ad6a487b0e3ec42ebf6c93e84b7cc01131b7b699cd3ae
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ec285653-9754-416c-8998-1508d59561c2.png
  Captured: 2026-10-28 07:10:06 UTC
  Source report: https://radar.cloudflare.com/scan/ec285653-9754-416c-8998-1508d59561c2
  SHA-256: 91de038656d01259ff507a0d9e314005c86a76adaab4029eebc9df604fe1b925
- URLQuery: https://screenshots.phishdestroy.io/uq/8179a568-02f7-461c-a472-b800d9943c21.png
  Source report: https://urlquery.net/report/8179a568-02f7-461c-a472-b800d9943c21
  SHA-256: f79813cfd0f0daf4497e9272f8939c90b370718c5236db0fb50dbab8cb77058b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-28T07:10:18Z",
        "uuid": "01a18157-13f2-7338-8ccf-f9e352586e1d",
        "scanned_at": "2026-10-28T07:09:01Z",
        "final_url": "https://musor.cfd/",
        "status": 200,
        "ip": "5.104.72.144",
        "ptr": "5-104-72-144.hostingsecurityes.com",
        "ips": [
            "5.104.72.144"
        ],
        "asns": [
            "200823"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "aabe36ad097d6183dbd733add52d9493b5f9135ac15cd89abbb1cc9f2f484c25",
        "tls": {
            "san": [
                "209trip.cfd",
                "321trip.top",
                "490trip.sbs",
                "musor.cfd",
                "musor.cyou",
                "musor.icu",
                "musor.rest",
                "musor.sbs",
                "trip100.top",
                "trip269.click"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YR2",
            "subject": "musor.icu",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-17T06:39:46Z",
            "valid_from": "2026-10-19T06:39:47Z"
        },
        "domain_age_days": 22,
        "apex_age_days": 22,
        "tls_age_days": 9,
        "tls_valid_days": 89,
        "requests": 4,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-28T07:10:20Z",
        "uuid": "ec285653-9754-416c-8998-1508d59561c2",
        "scanned_at": "2026-10-28T07:10:06Z",
        "final_url": "https://musor.cfd/",
        "status": 200,
        "history": [
            {
                "url": "https://musor.cfd/",
                "status": 200
            }
        ],
        "dom_hash": "8350d914361e1a8bfaf132d48d286c0378c9d83039d7f360dee4ad6dbf399a4c",
        "doc_hash": "aabe36ad097d6183dbd733add52d9493b5f9135ac15cd89abbb1cc9f2f484c25",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains",
            "Gaming",
            "Entertainment"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "musor.cfd",
                "type": "A",
                "value": "5.104.72.144"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.16",
        "whois": {
            "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
            "created": "2026-10-05T18:41:35Z",
            "updated": "2026-10-05T18:41:39Z",
            "expires": "2027-10-05T23:59:59Z",
            "nameservers": [
                "etienne.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T07:10:00Z",
        "analysis_at": "2026-10-21T13:55:14Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
        "created": "2026-10-05T18:41:35Z",
        "expires": "2027-10-05T23:59:59Z",
        "updated": "2026-10-05T21:00:30Z",
        "first_seen": "2026-10-05T22:40:02Z",
        "dns": [
            {
                "ttl": 300,
                "type": "TXT",
                "value": "yandex-verification:f1adafcdc827256c"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "5.104.72.144"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "yandex-verification: f1adafcdc827256c"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "savanna.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "etienne.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "etienne.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-21T14:07:16Z",
        "jarm": "2ad2ad0002ad2ad00042d42d0000005d86ccb1a0567e012264097a0315d7a7",
        "cert": {
            "san": [
                "209trip.cfd",
                "321trip.top",
                "490trip.sbs",
                "musor.cfd",
                "musor.cyou",
                "musor.icu",
                "musor.rest",
                "musor.sbs",
                "trip100.top",
                "trip269.click"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "6d7ed24139e3b898d9d233a402c6a745356",
            "sha256": "76baf9b2fda423408d0ca236fb4f5068086a010a1e3d2274a74cd8ba61aa63bd",
            "subject": "musor.icu",
            "valid_to": "2027-01-17T06:39:46Z",
            "valid_from": "2026-10-19T06:39:47Z"
        },
        "whois": {
            "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
            "registrar_iana_id": "1647",
            "registrar_url": "https://www.openprovider.com/",
            "created": "2026-10-05T18:41:35Z",
            "updated": "2026-10-05T18:41:39Z",
            "expires": "2027-10-05T23:59:59Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "brian.ns.cloudflare.com",
                "sunny.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-28T07:10:42Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "musor.cfd"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-06T04:25:54Z",
            "first": "2026-10-05T23:03:43Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 4.47,
            "avg_page_bytes": 1802
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://musor.cfd/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://musor.cfd/",
            "title": "Musor Drop — Кейсы и дропы CS2: вопросы и понятия",
            "ogType": "website",
            "robots": "index,follow",
            "ogTitle": "Musor Drop — Кейсы и дропы CS2: вопросы и понятия",
            "description": "Musor Drop — вопросы о кейсах и дропах CS2, коллекциях и условиях бонусов. Справочная страница Мусор дроп без открытия кейсов и приёма платежей.",
            "canonicalUrl": "https://musor.cfd/",
            "ogDescription": "Musor Drop — вопросы о кейсах и дропах CS2, коллекциях и условиях бонусов. Справочная страница Мусор дроп без открытия кейсов и приёма платежей."
        },
        "trackers": {
            "requests": 2
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 21,
                "tls": 28,
                "wait": 21,
                "connect": 19,
                "download": 0
            },
            "response_ms": 89
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 6059,
            "co2_grams": 0.0002,
            "cleaner_than": 83
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.136",
                    "host": "savanna.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.61",
                    "host": "etienne.ns.cloudflare.com"
                }
            ],
            "zone": "musor.cfd"
        },
        "location": {
            "ip": "5.104.72.144",
            "asn": "209372",
            "org": "Clouvider Limited",
            "city": "Ottawa",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "musor.icu"
        },
        "dns": {
            "A": [
                "5.104.72.144"
            ],
            "NS": [
                "etienne.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"etienne.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417836669, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "yandex-verification: f1adafcdc827256c",
                "yandex-verification:f1adafcdc827256c"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "5.104.72.144",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://musor.cfd"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.musor.cfd"
            ]
        },
        "linked_pages": {
            "internal_count": 3
        },
        "whois": {
            "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu",
            "created": "2026-10-05T18:41:35Z",
            "updated": "2026-10-05T18:41:39Z",
            "expires": "2027-10-05T23:59:59Z",
            "status": [
                "serverTransferProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "etienne.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html"
            }
        }
    }
}
```