m0ney[.]app

PhishDestroy first observed m0ney.app on Apr 23, 2026. The captured page title is “m0ney.app”. Stored page analysis classifies the content as credential phishing. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, DNS security resolvers, and Cloudflare Radar. VirusTotal recorded 17 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, Ermes, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Jul 28, 2026 at 02:29 UTC. DNS security checks returned 3 blocking results across 12 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. On Apr 23, 2026 at 01:15 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:07 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list Porkbun LLC as the registrar and Jul 12, 2025 as the creation date. At collection time, the hostname resolved to 74.208.236.109 on AS8560 (IONOS SE). The recorded endpoint location is Kansas City, US. The stored server header is Apache. DOM analysis on Jul 30, 2026 at 02:20 UTC returned 73/100. The evidence archive retains 1 visual capture from PhishDestroy. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Nov 1, 2026; checked Aug 5, 2026 at 01:02 UTC.

The content indicators and 3 positive source findings support the current credential phishing classification.