# moonshot-ranks.info — SUSPICIOUS

> moonshot-ranks.info impersonates Moonshot with elevated risk; domain created March 09, 2026 and only 1 of 95 VirusTotal scanners detected it.

## Summary
PhishDestroy identifies moonshot-ranks.info as an active domain designed to impersonate the Moonshot brand, posing an elevated risk to users who may mistake it for the legitimate service. This malicious site leverages a Let's Encrypt SSL certificate to appear trustworthy while hosting content that closely mirrors the official Moonshot platform. The domain resolves to IP 104.21.12.193 and was registered just days ago through PDR Ltd. d/b/a PublicDomainRegistry.com, a common choice for disposable fraudulent domains. Users should exercise extreme caution when encountering this site or any unsolicited links referencing it.  This domain was flagged by PhishDestroy after VirusTotal analysis revealed it is only detected by 1 out of 95 security vendors, highlighting its stealthy nature and the challenge of early detection. The domain was registered on March 09, 2026, making it a very recent addition to the threat landscape. Its use of a legitimate SSL certificate further complicates user awareness, as browsers display the familiar padlock icon without warning. The combination of a fresh registration date, low detection rate, and brand impersonation tactics suggests this domain is part of an active campaign targeting Moonshot users.  If you visited moonshot-ranks.info, immediately cease use of any credentials entered on the site and consider them compromised. Run a full antivirus scan to check for malware or unauthorized access to your system. Report the domain to your IT security team or the Moonshot abuse team to aid in takedown efforts. Avoid interacting with this site and any associated links, as they may lead to further compromise. Stay vigilant for unusual account activity and enable multi-factor authentication where possible to mitigate potential damage from credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Moonshot

## Domain Intelligence
- Registered: 2026-03-09 15:27:06
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.12.193

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d2c990f6-fadc-420d-9c4a-6cba916448f8
- PhishDestroy: https://phishdestroy.io/domain/moonshot-ranks.info/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-ranks.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-ranks.info/
Last updated: 2026-03-21