# apps-moonwell.xyz — SUSPICIOUS

> Investigating apps-moonwell.xyz as a live credential phishing site mimicking Moonwell, with 0 of 95 VirusTotal vendors detecting it.

## Summary
PhishDestroy identifies apps-moonwell.xyz as an active credential phishing domain under investigation for impersonating Moonwell, a decentralized finance protocol. The threat type is classified as generic_phishing with current status active. This domain poses a direct risk to users who may unknowingly submit login credentials, exposing sensitive financial or personal data to threat actors.


This domain was flagged by 0 of 95 VirusTotal vendors, registered through Dynadot LLC on March 19, 2026, and resolves to IP 188.114.97.3. It utilizes a Let’s Encrypt SSL certificate for deceptive legitimacy. The domain remains undetected by major security vendors and lacks a presence on known blocklists, indicating a potentially emerging and rapidly evolving threat.


The status of this campaign is active, with no current detections despite its malicious intent. Users are strongly advised to avoid interacting with apps-moonwell.xyz or providing any credentials. Security teams should block this domain at the network level and monitor for related infrastructure. Immediate reporting to relevant financial or blockchain security teams is recommended to mitigate potential losses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 05:45:29
- Registrar: Dynadot LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bb1da4b8-a0e8-4d66-b93f-24481c9fcdb1
- PhishDestroy: https://phishdestroy.io/domain/apps-moonwell.xyz/
- LLM endpoint: https://phishdestroy.io/domain/apps-moonwell.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/apps-moonwell.xyz/
Last updated: 2026-03-23