mstrbtc[.]us

The domain mstrbtc.us has been identified as posing an elevated phishing threat. This domain was flagged under the generic phishing category without evidence of impersonating a specific brand. A potentially malicious infrastructure was outlined which might have been intended to deceive users into divulging sensitive information, but any specific drainer kit or phishing mechanism remains unidentified at this time.

Infrastructure analysis of mstrbtc.us shows it was detected by 11 out of 95 security vendors on VirusTotal, indicating a significant threat profile. The domain was resolved to an IP address of 104.21.9.225, which is associated with Cloudflare, Inc. (AS13335) and located in the United States. Registered through Web Commerce Communications Limited, the domain was created on an anomalous future date, February 21, 2026, suggesting potential errors or intentional misreporting. The SSL certificate is issued by Google Trust Services / WE1. Currently listed on one security blocklist and blocked by PhishDestroy, the domain's page title indicates a '522: Connection timed out' status.

The domain mstrbtc.us is currently offline, which is a result of rapid response measures to neutralize the threat. This proactive action has mitigated immediate risks, yet vigilance is necessary due to its prior appearance on security blocklists. It is important for users to ensure their systems are protected by up-to-date security solutions and to exercise caution when encountering similar domains. Continuous monitoring and community alertness are key to defending against such threats in the future.