# moonshot-app.fun — SUSPICIOUS

> moonshot-app.fun impersonates Moonshot to steal credentials. This domain was flagged by 2 security blocklists and VirusTotal. Avoid entering any login details.

## Summary
PhishDestroy identifies moonshot-app.fun as a current brand impersonation threat targeting the Moonshot platform. This domain poses a direct risk to users by mimicking Moonshot’s branding to deceive visitors into entering sensitive login credentials or personal information. The threat actor behind this site has crafted a replica interface likely designed to harvest credentials for malicious purposes such as account takeovers or financial fraud.  This domain was flagged by 2 security blocklists and detected by 2 out of 95 VirusTotal security vendors. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 04, 2026, and resolves to IP address 188.114.96.3. Notably, major browser extensions such as MetaMask and ScamSniffer have already blocked access to this domain, signaling a strong consensus among security tools regarding its malicious nature. The use of a Let’s Encrypt SSL certificate adds a veneer of legitimacy, potentially luring users into a false sense of security.  If you have visited moonshot-app.fun, immediately cease interaction with the site and avoid entering any login credentials or personal data. Change your Moonshot account password immediately using a secure, trusted device and network. Enable two-factor authentication if available. If you entered payment or sensitive information, contact your financial institution and monitor accounts for unusual activity. Report the domain to Moonshot’s official support and your local cybersecurity authority to help mitigate further risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Moonshot

## Domain Intelligence
- Registered: 2026-03-04 08:36:25
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/59e19d13-7a45-431f-afd2-0c1faadafbb9
- PhishDestroy: https://phishdestroy.io/domain/moonshot-app.fun/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-app.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-app.fun/
Last updated: 2026-03-21