# moonshot-money.fun — SUSPICIOUS

> PhishDestroy identifies moonshot-money.fun as a fake finance site impersonating Moonshot. VirusTotal flags 4/95 security vendors. Check the full report.

## Summary
PhishDestroy identifies moonshot-money.fun as an active brand impersonation domain targeting Moonshot with an elevated risk profile. This domain specifically mimics the branding of Moonshot, a well-known financial services platform, to deceive users into engaging with fraudulent content. The threat is classified as brand impersonation, a form of phishing designed to exploit trust in established brands for malicious purposes.  This domain was flagged by PhishDestroy due to its malicious intent and multiple red flags. VirusTotal security vendors flagged moonshot-money.fun 4 out of 95 times, indicating partial detection by leading security tools. The domain is registered through Global Domain Group LLC and resolves to IP address 172.67.183.170. The domain was created on March 18, 2026, and holds an SSL certificate issued by Let's Encrypt, which attackers often exploit to mimic legitimate sites.  To mitigate the risks associated with this threat, organizations and individuals should block access to moonshot-money.fun at the network level. Users should be alerted to avoid interacting with any communication referencing this domain, as it may lead to credential theft or malware installation. Additionally, Moonshot should consider submitting this domain to domain takedown services and reporting it to relevant cybersecurity authorities. Regular monitoring of newly registered domains resembling Moonshot’s branding is recommended to prevent further impersonation attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Moonshot

## Domain Intelligence
- Registered: 2026-03-18 00:01:47
- Registrar: Global Domain Group LLC
- IP: 172.67.183.170

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/634c6a9e-d428-44c8-9c43-25135ab3d330
- PhishDestroy: https://phishdestroy.io/domain/moonshot-money.fun/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-money.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-money.fun/
Last updated: 2026-03-21