moodku[.]net
“Moodyes”
Resumo das evidências
PhishDestroy identifies moodku.net as a recently activated fake login portal designed to harvest user credentials under the guise of a legitimate service. This domain mimics the branding and interface of trusted platforms to trick victims into entering sensitive information such as usernames, passwords, or financial details. The threat actor leverages Cloudflare’s infrastructure and a Let’s Encrypt SSL certificate to appear legitimate, increasing the likelihood of successful deception. Users interacting with this domain risk direct exposure of their login credentials to unauthorized third parties, potentially leading to account takeovers, financial fraud, or identity theft. This domain was flagged by PhishDestroy due to its recent creation on February 25, 2026, and its complete lack of detection on VirusTotal (2/95 security engines as of the latest scan). The domain resolves to IP address 188.114.96.3, which is associated with Cloudflare’s hosting infrastructure—commonly abused by threat actors to obfuscate their true location and evade takedown efforts. While no blocklist entries were recorded at the time of investigation, the combination of a freshly registered domain, low detection rates, and the use of legitimate infrastructure (Cloudflare, Let’s Encrypt) strongly indicates active phishing operations. Such domains often remain undetected for critical periods, allowing threat actors to maximize their window of opportunity. If you have visited moodku.net or entered any credentials, immediately change passwords for accounts associated with this domain and enable multi-factor authentication where possible. Scan your devices for malware using reputable security software and monitor financial accounts for unauthorized activity. Report the domain to your organization’s security team or to platforms like PhishDestroy to help block future access. Avoid re-entering sensitive information on this domain, and warn others who may have been targeted. For further analysis, consult the full PhishDestroy report on moodku.net.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 13/08/2026
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of moodku.net · checked Apr 17, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo