# moonshot-money.cyou — MALICIOUS

> moonshot-money.cyou impersonates Moonshot to trick users into sharing sensitive data. This elevated-risk site was registered March 18, 2026, and 11/95 security.

## Summary
PhishDestroy identifies moonshot-money.cyou as an active brand impersonation site targeting Moonshot users. The domain was registered on March 18, 2026, via Global Domain Group LLC and resolves to IP 188.114.97.3.

This domain was flagged by 11/95 VirusTotal security vendors and is unlisted on Google Safe Browsing. The elevated threat poses as a fraudulent Moonshot service to harvest credentials or payment data.

moonshot-money.cyou remains active; users should block the domain and IP immediately. Remaining risk is high due to ongoing availability and SSL certificate legitimacy (Let's Encrypt).

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Moonshot

## Domain Intelligence
- Registered: 2026-03-18 00:01:27
- Registrar: Global Domain Group LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a1514cdf-17dd-464f-8dfd-e4810849e99f
- PhishDestroy: https://phishdestroy.io/domain/moonshot-money.cyou/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-money.cyou/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-money.cyou/
Last updated: 2026-03-21