musordrop2[.]com

PhishDestroy first observed musordrop2.com on Sep 9, 2026. Stored content metadata identifies Steam as the apparent target. The captured page title is “Security Check”. Current evidence score: 78/100 (critical).

One source contains a positive finding: URLScan. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Steam and assigned phishing as its category on Sep 9, 2026 at 05:08 UTC. Non-positive and contextual checks: On Sep 9, 2026 at 05:30 UTC, VirusTotal recorded 0 detections among 89 engines; Google Safe Browsing returned no flag. AlienVault OTX listed 3 community pulse references (not vendor detections) on Sep 9, 2026 at 05:31 UTC. The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 22:20 UTC. The 0/89 VirusTotal snapshot and the positive findings above are conflicting observations from different sources or collection times.

The collector marked the hostname reachable on Sep 9, 2026 at 04:04 UTC, but did not retain the HTTP response code. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Sep 3, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 45.74.7.27. The recorded endpoint location is Rotterdam, NL. The stored server header is Microsoft-IIS/10.0. The evidence archive retains 3 visual captures from PhishDestroy and URLScan. TLS metadata lists YR2 as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding. The target field identifies Steam, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.