mokapstudioact[.]com

This domain is flagged as a credential harvesting phishing site targeting users of Mokap Studio, a legitimate service. The site presents a login interface under the page title 'Mokap Studio' to trick visitors into entering sensitive account details, which are then captured by threat actors for unauthorized access or identity theft. The fraudulent nature is reinforced by the domain name's slight deviation from the legitimate brand, a common tactic to exploit user inattention during authentication attempts. Analysis indicates the domain was registered on September 04, 2025, through Internet Domain Service BS Corp., a registrar frequently associated with malicious infrastructure. It resolves to the IP address 165.154.239.203 and is detected by 5 out of 95 security vendors on VirusTotal, confirming its classification as a phishing threat. The site employs Nginx and OpenResty, technologies often used to obfuscate malicious activity, and enforces HSTS, which may be leveraged to appear more legitimate to unsuspecting users. If you visited mokapstudioact.com or entered credentials on the site, immediately change the passwords for any accounts using the same or similar login details. Enable multi-factor authentication where available to add an additional layer of security. Monitor your accounts for unauthorized activity, such as unfamiliar transactions or login attempts, and report any suspicious behavior to the affected service providers. Clear your browser cache and cookies to remove any residual session data, and consider running a full system scan using updated security tools to detect potential malware infections.