azuremods[.]org

PhishDestroy first observed azuremods.org on Aug 22, 2026. The captured page title is “AzureMods — Premium Game Mods”. Current evidence score: 91/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Cloudflare Radar, and URLQuery. VirusTotal recorded 3 detections among 91 engines: alphaMountain.ai, Gridinsoft, SOCRadar on Aug 22, 2026 at 08:20 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories malware and brand embedding; its verdict timestamp was not retained. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100; no observation timestamp was retained. On Aug 22, 2026 at 18:04 UTC, AlienVault OTX listed 4 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The separate external-blocklist snapshot contained no matches on Aug 22, 2026 at 18:20 UTC. URLScan completed without a malicious verdict (score 0) on Aug 22, 2026 at 11:08 UTC.

The collector marked the hostname reachable on Aug 22, 2026 at 08:19 UTC, but did not retain the HTTP response code. Registration records for the domain list Key-Systems GmbH as the registrar and Aug 17, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 158.94.208.63 on AS202412 (Omegatech LTD). The recorded endpoint location is Frankfurt am Main, DE. The stored server header is nginx/1.24.0 (Ubuntu). The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 16, 2026; checked Aug 22, 2026 at 10:02 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.