moonshot[.]com-verif[.]id

This domain presents an elevated risk as a brand impersonation threat specifically targeting Moonshot users. Analysis reveals it was designed to mimic Moonshot's login interface, likely to steal credentials or deploy a crypto drainer that empties connected wallets. The site was taken offline after being reported, but its infrastructure and registration details indicate a deliberate phishing operation.

Key indicators include a VirusTotal detection rate of 4 out of 95 security vendors flagging the domain as malicious. The domain was registered on February 21, 2026 through Web Commerce Communications Limited, and resolves to IP address 104.21.12.45. Its SSL certificate was issued by Google Trust Services (WE1), and it currently appears on two security blocklists. Despite being offline, these data points confirm the domain was set up for malicious purposes.

Users should never attempt to visit this domain, even if it appears offline, as it may redirect or serve malicious content. If you entered credentials or connected a wallet, immediately change your Moonshot password and revoke any wallet permissions. For verification of legitimate Moonshot domains, always use PhishDestroy's lookup tool. Report any similar suspicious domains to security teams and enable two-factor authentication on your accounts.