MALICIOUS — CRITICAL
moodku[.]net
PhishDestroy identifies moodku.net as a recently activated fake login portal designed to harvest user credentials under the guise of a legitimate service.
- VirusTotal
- 14/91
- Blocklists
- 2 · MetaMask, SEAL
- Kullanılabilirlik
- İçerik kullanılamıyor · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
moodku.net — İçerik kullanılamıyor (HTTP 502). Marka kimliğine bürünme: ["ethereum"]; Dolandırıcılık türü: Credential Phishing. Kanıt özeti: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 92/100. Kayıt kuruluşu: Cloudflare.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
PhishDestroy identifies moodku.net as a recently activated fake login portal designed to harvest user credentials under the guise of a legitimate service. This domain mimics the branding and interface of trusted platforms to trick victims into entering sensitive information such as usernames, passwords, or financial details. The threat actor leverages Cloudflare’s infrastructure and a Let’s Encrypt SSL certificate to appear legitimate, increasing the likelihood of successful deception. Users interacting with this domain risk direct exposure of their login credentials to unauthorized third parties, potentially leading to account takeovers, financial fraud, or identity theft. This domain was flagged by PhishDestroy due to its recent creation on February 25, 2026, and its complete lack of detection on VirusTotal (2/95 security engines as of the latest scan). The domain resolves to IP address 188.114.96.3, which is associated with Cloudflare’s hosting infrastructure—commonly abused by threat actors to obfuscate their true location and evade takedown efforts. While no blocklist entries were recorded at the time of investigation, the combination of a freshly registered domain, low detection rates, and the use of legitimate infrastructure (Cloudflare, Let’s Encrypt) strongly indicates active phishing operations. Such domains often remain undetected for critical periods, allowing threat actors to maximize their window of opportunity. If you have visited moodku.net or entered any credentials, immediately change passwords for accounts associated with this domain and enable multi-factor authentication where possible. Scan your devices for malware using reputable security software and monitor financial accounts for unauthorized activity. Report the domain to your organization’s security team or to platforms like PhishDestroy to help block future access. Avoid re-entering sensitive information on this domain, and warn others who may have been targeted. For further analysis, consult the full PhishDestroy report on moodku.net.
Veri kapsamı12 recorded checks
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 5 identified
Progressive JavaScript framework for building user interfaces.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of moodku.net · checked Apr 17, 2026
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.