drop-pods[.]store

The domain drop-pods.store was registered on February 21, 2026 through NAME DOT STORE INC. It resolves to the IP address 23.227.38.65, which is hosted in Canada and belongs to AS13335 Cloudflare, Inc. The site returns an HTTP 301 redirect and presents the page title “This store is unavailable.” The SSL certificate is issued by Google Trust Services under the WE1 label, and the connection enforces HSTS and HTTP/3 via Cloudflare’s edge network. DNS resolution is delegated to the nameservers bysdomains.venus.orderbox-dns.com and bysdomains.mars.orderbox-dns.com, both appearing to be managed by the Orderbox platform. The domain has a Gridinsoft trust score of 0 out of 100, indicating a lack of perceived legitimacy. VirusTotal scans show that 2 of 95 security vendors have flagged the domain as malicious, and the domain currently appears on one external blocklist. PhishDestroy also lists the domain as blocked. The observed indicators collectively point to a high‑risk credential‑harvesting operation, consistent with the generic_phishing classification. The presence of a legitimate‑looking SSL certificate and Cloudflare front‑end may be intended to increase user trust, while the “This store is unavailable” title suggests a lure or placeholder page. Uncertainty remains around the exact payload or phishing landing page, as the redirected content was not captured during analysis. Defenders should block drop-pods.store at the DNS or firewall level and monitor for outbound connections to 23.227.38.65. Email filtering rules should be updated to flag any messages containing references to the domain or its associated Orderbox nameservers. Continued harvesting of threat intelligence, including periodic VirusTotal re‑scans and blocklist checks, is recommended to capture any changes in the domain’s reputation or hosting infrastructure.