apple-ic[.]mooo[.]com

This domain, apple-ic.mooo.com, poses a high-risk brand impersonation threat designed to deceive users into believing they are interacting with Apple’s official services. The site presents a fraudulent login interface, likely intended to harvest credentials, payment details, or other sensitive information from victims. Such impersonation schemes are commonly used to facilitate account takeovers, unauthorized transactions, or further phishing attacks targeting Apple customers. The use of a subdomain under mooo.com, a free dynamic DNS provider, is a tactic frequently employed by threat actors to evade detection and maintain low-cost infrastructure. Analysis indicates that apple-ic.mooo.com was registered through Porkbun LLC, a domain registrar that has been observed in previous phishing campaigns. The domain resolves to the IP address 198.18.1.211, which has been associated with other malicious activities. As of the latest assessment, 17 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on two security blocklists. The SSL certificate is issued by an entity linked to phishing infrastructure, further corroborating its fraudulent nature. Despite its creation date of March 24, 2000, the subdomain’s recent malicious activity suggests it was either compromised or repurposed for this campaign. Users who have visited apple-ic.mooo.com or entered credentials on the site should take immediate action to mitigate potential risks. First, change any passwords associated with Apple accounts or other services where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to prevent unauthorized access. Monitor financial statements and Apple account activity for signs of unauthorized transactions. If payment details were entered, contact the relevant financial institution to report potential fraud and request a card replacement if necessary. Finally, scan the device used to access the site for malware, as some phishing pages may deliver additional payloads.