Phishing sites impersonating Moonshot
PhishDestroy has recorded 1,104 phishing domains impersonating Moonshot since 2025-09-06, 1 of them in the last 30 days. The most used registrars are Netlify and NiceNIC; the most common TLDs are .app and .com. Open Moonshot only from its official app or a saved bookmark.
1,104
Domains, all time
1
Last 30 days
191
Online at last check
203
Confirmed takedowns
New domains in the last 90 days
How to tell a fake Moonshot site
Words most often added to the brand in reported domains: listing, voting, vote, monshots, moonshots, monshot, moonshts, moonshotvote, moonjoin, list.
- Type the address yourself or use a bookmark; phishing links for Moonshot arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Moonshot will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.
Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.
Latest Moonshot phishing domains
Where they are registered and hosted
Registrars
- Netlify279
- NiceNIC260
- PublicDomainRegistry.com114
- Global Domain82
- Tucows Domains54
- Vercel47
- Name.com40
- Cloudflare37
Hosting networks
- CLOUDFLARENET - Cloudflare, Inc., US246
- Cloudflare, Inc.224
- AMAZON-02 - Amazon.com, Inc., US184
- CLOUDFLARENET, US175
- Amazon.com, Inc.107
- AMAZON-AES - Amazon.com, Inc., US71
- AS13335 Cloudflare, Inc.21
- AMAZON-02, US19
Related
Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Moonshot; share of all PhishDestroy reports: 0.49%.