moltchecker[.]com

This domain, moltchecker.com, is flagged as a credential phishing site designed to harvest sensitive login information, specifically targeting users of iCloud, crypto wallets, and payment platforms. The site mimics legitimate authentication flows, leveraging fake sign-in portals for Apple iCloud, Google, and crypto wallet integrations to deceive victims into entering their credentials. Given the inclusion of technologies like Stripe and Apple Sign-in, the site likely aims to capture financial and personal data, posing a significant risk of account takeovers and financial fraud. Analysis indicates this domain was registered on March 1, 2026, through Hello Internet Corp, a registrar often associated with high-risk domains. The site is currently offline, but it was actively blocked by multiple security entities, including four blocklists, and flagged by 2 out of 95 security vendors on VirusTotal. Infrastructure analysis reveals the domain resolved to IP address 104.21.78.106, hosted on a content delivery network that is frequently exploited for phishing campaigns. The use of Node.js and Express suggests a dynamically generated phishing kit, enabling rapid deployment and evasion of detection. If you visited moltchecker.com or entered any credentials, immediate action is required. First, revoke access to any accounts linked to the site, particularly iCloud, Google, or crypto wallets, and enable multi-factor authentication where available. Monitor all associated accounts for unauthorized activity, including financial transactions or password changes. Reset passwords using a secure, unrelated device, and consider freezing credit reports if financial data was exposed. Report the incident to relevant platforms, such as the Anti-Phishing Working Group or your local cybercrime authority, to aid in tracking and mitigating further threats.