money-listing[.]id

The domain money-listing.id is a confirmed phishing site engaged in brand impersonation targeting Apple users. It was designed to deceive victims into believing they were interacting with an official Apple service, likely to harvest login credentials or personal information. No crypto drainer kit was detected. The site is currently taken offline, but its prior activity classifies it as an elevated-risk threat.

Technical analysis shows money-listing.id was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist (PhishDestroy) and was registered through Cloudflare, Inc. It resolved to the IP address 172.67.164.222, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'About — Moonshot.' Technologies detected include Cloudflare and HTTP/3. No creation date is available, and nameservers are lily.ns.cloudflare.com and sergi.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Victims of this phishing scam should immediately change any passwords entered on money-listing.id, especially if reused across other accounts. Enable two-factor authentication (2FA) on all sensitive services, particularly Apple ID, to prevent unauthorized access. Monitor financial accounts and credit reports for signs of fraud. Report the domain to Apple’s official phishing reporting channels and to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in takedown efforts. If personal or financial data was exposed, consider placing a fraud alert with credit bureaus.