get-mstr[.]net

This domain, get-mstr.net, is flagged as an active phishing threat by multiple security vendors and blocklists as of July 24, 2026. Analysis indicates it was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. Infrastructure analysis reveals the domain resolves to Cloudflare IP 188.114.97.3 (AS13335), leveraging Cloudflare’s services for hosting and protection, including Cloudflare Browser Insights and HTTP/3. The SSL certificate is issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites using Cloudflare.

The domain is currently returning an HTTP 403 status with the page title 'Just a moment...', a response consistent with Cloudflare’s bot challenge or access restriction, which may obscure the actual phishing content from automated scans. Security vendors have detected this domain as malicious, with 10 of 93 engines on VirusTotal flagging it. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further corroborating its classification as a phishing threat. The domain’s trust score from Gridinsoft is 0/100, reinforcing its high-risk status.

While the exact phishing target or brand impersonation remains unconfirmed due to the lack of accessible content, the infrastructure and detection patterns align with typical phishing campaigns. Defenders should treat this domain as hostile and block it at the DNS or network level. Monitoring for changes in HTTP status or page content may reveal additional indicators, but no further interaction with the domain is recommended without proper isolation.