# moondepo.com — MALICIOUS

> Moondepo.com impersonates a popular blockchain crypto casino to steal user data. Stay informed and avoid this high-risk phishing site.

## Summary
PhishDestroy identifies Moondepo.com as a high-risk generic phishing domain impersonating a blockchain-based crypto casino. The site poses a significant threat to users by attempting to steal sensitive information under the guise of a legitimate online gambling platform.

The domain was registered recently on March 4, 2026, through NiceNIC International Group Co., Limited and resolved to IP address 104.21.95.41. It appeared on one security blocklist and was flagged by 10 out of 95 VirusTotal security vendors, confirming its malicious nature. The page title, “Moondepo: Most Popular Online Crypto Casino Based on Blockchain,” suggests it targets cryptocurrency gamblers, leveraging trust in blockchain technology to deceive victims.

Currently, Moondepo.com has been taken offline, reducing immediate risk to users. PhishDestroy recommends remaining vigilant against similar crypto casino phishing attempts, ensuring domains are verified before engagement. Users and security teams should continue monitoring for potential resurrections or related phishing campaigns to maintain strong protection against evolving threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 666)
- Page title: Moondepo: Most Popular Online Crypto Casino Based on Blockchain

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.95.41
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dolly.ns.cloudflare.com mike.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/LhHNKCDz/5911baa45937.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/moondepo.com
- PhishDestroy: https://phishdestroy.io/domain/moondepo.com/
- LLM endpoint: https://phishdestroy.io/domain/moondepo.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moondepo.com/
Last updated: 2026-03-19