word-apps[.]net

PhishDestroy first observed word-apps.net on Sep 5, 2026. Stored content metadata identifies Apple as the apparent target. Page analysis recorded additional brand references to Google, Microsoft, Office 365, and Outlook. Current evidence score: 45/100 (high).

One source contains a positive finding: Spamhaus DBL. Spamhaus DBL: DBL_SPAM on Sep 5, 2026 at 02:30 UTC. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 5, 2026 at 02:49 UTC. The separate external-blocklist snapshot contained no matches on Sep 5, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Sep 5, 2026 at 02:48 UTC. URLScan captured the page on Sep 5, 2026 at 01:35 UTC. No completed VirusTotal result is available.

The collector marked the hostname reachable on Sep 5, 2026 at 01:35 UTC, but did not retain the HTTP response code. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Jul 13, 2026 as the creation date. At collection time, the hostname resolved to 196.251.121.176 on AS205759 (Ghosty Networks LLC). The recorded endpoint location is Frankfurt am Main, DE. DOM analysis on Sep 5, 2026 at 02:22 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding. The target field identifies Apple, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.