# moonshot-ratings.net — MALICIOUS

> Moonshot-ratings.net is a high-risk phishing site now offline. Avoid interaction and ensure your security software is up to date to stay protected.

## Summary
PhishDestroy identifies moonshot-ratings.net as a generic phishing domain created recently and classified as high risk. The domain was registered through NiceNIC International Group Co., Limited and flagged for malicious activity.

Technical analysis shows the domain resolves to IP 172.67.165.39 and is listed on multiple security blocklists. It was also detected in one AlienVault OTX pulse and flagged by 14 out of 95 VirusTotal scanners, indicating strong suspicion of phishing behavior.

Currently, moonshot-ratings.net is offline with connection timeouts preventing access. This status, combined with its presence on blocklists, suggests active mitigation. Users are advised to avoid the domain and maintain updated security measures.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: moonshot-ratings.net | 522: Connection timed out

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.165.39
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dean.ns.cloudflare.com", "priscilla.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc6f7-adbd-726d-836e-3a084e96b183.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/150e291f-c998-48c7-8f3e-5c9caf35f636
- PhishDestroy: https://phishdestroy.io/domain/moonshot-ratings.net/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-ratings.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-ratings.net/
Last updated: 2026-03-19