# moonshot-money.sbs — MALICIOUS

> moonshot-money.sbs impersonates the brand Moonshot while being flagged by 10 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies active brand impersonation threat linked to the domain moonshot-money.sbs.

This domain poses as Moonshot and is currently active in a phishing campaign. VirusTotal flags this domain as malicious with 10 of 95 security vendors detecting threats. The domain was registered through Global Domain Group LLC on March 18, 2026, and resolves to IP 172.67.177.56 secured by a Let's Encrypt SSL certificate.

The elevated risk level indicates active exploitation for credential theft or financial fraud. Users should avoid interaction and report this domain to security teams. Organizations are advised to block the domain at network gateways and update threat intelligence feeds with the seed identifier 60a9c9.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Moonshot

## Domain Intelligence
- Registered: 2026-03-18 00:01:31
- Registrar: Global Domain Group LLC
- IP: 172.67.177.56

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d5b07d33-ce73-4e45-bc38-5f3f92912770
- PhishDestroy: https://phishdestroy.io/domain/moonshot-money.sbs/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-money.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-money.sbs/
Last updated: 2026-03-21