# moonbagorg.pages.dev — SUSPICIOUS

> PhishDestroy is investigating moonbagorg.pages.dev for phishing. Newly registered via Cloudflare, avoid entering credentials. Risk: under_investigation.

## Summary
PhishDestroy is actively investigating moonbagorg.pages.dev, which is currently categorized as a generic phishing site. The domain's status is listed as active, indicating that it is potentially posing an ongoing threat to users.

Technical analysis reveals that moonbagorg.pages.dev resolves to IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services. At the time of analysis, the domain has not been widely flagged, with a VirusTotal detection ratio of 0 out of 95 vendors. Registration was facilitated through Cloudflare, Inc.

Given the 'under_investigation' status and the potential for phishing, users are strongly advised to exercise extreme caution when interacting with moonbagorg.pages.dev or any related communications. It is crucial to avoid entering any personal information, credentials, or sensitive data on the site. Further investigation is ongoing to determine the full extent of the threat posed by this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f4617bbc-7ede-49d4-962e-23418ce57d58
- PhishDestroy: https://phishdestroy.io/domain/moonbagorg.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/moonbagorg.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonbagorg.pages.dev/
Last updated: 2026-03-29