# moonshot-gemlists.com — SUSPICIOUS > moonshot-gemlists.com impersonates Moonshot to trick users into sharing data. Blocked by ScamSniffer and flagged by 2/95 VirusTotal scanners. ## Summary PhishDestroy identifies moonshot-gemlists.com as an elevated-risk domain engaged in brand impersonation targeting the legitimate Moonshot service. This site mirrors Moonshot’s branding to deceive users into entering credentials or downloading malware, exposing victims to credential theft or financial loss. The threat level is elevated due to active impersonation tactics and multiple red flags detected by security systems. This domain was flagged by ScamSniffer and appears on 1 security blocklist. It resolves to IP 188.114.97.3, registered via Hello Internet Corp on February 09, 2026. Security vendor VirusTotal shows 2 out of 95 scanners flagged the domain, with an SSL certificate issued by Google Trust Services. These indicators collectively confirm malicious intent and elevated risk to visitors. Users should avoid any interaction with moonshot-gemlists.com and report it to their browser provider or security tool. Always verify URLs against official Moonshot domains (e.g., moonshot.app or moonshot.io) before entering credentials. Enable browser-based phishing protection and report suspicious domains to threat intelligence platforms. If you've already visited, scan your device with reputable antivirus software, change passwords used on the site, and monitor accounts for unauthorized activity. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: Moonshot ## Domain Intelligence - Registered: 2026-02-09 22:53:06 - Registrar: Hello Internet Corp - IP: 188.114.97.3 ## Detection Status - VirusTotal: 2 vendors flagged - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["ScamSniffer"] ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/3e2fe376-5c07-4b8f-97ec-3e79ae0b9b4d - PhishDestroy: https://phishdestroy.io/domain/moonshot-gemlists.com/ - LLM endpoint: https://phishdestroy.io/domain/moonshot-gemlists.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-gemlists.com/ Last updated: 2026-03-21