# moonshots-trending.com — SUSPICIOUS

> The domain moonshots-trending.com impersonates Moonshot with a fake voting page. This credential harvesting threat was blocked by PhishDestroy.

## Summary
The domain moonshots-trending.com was identified as a generic phishing threat impersonating the Moonshot brand through a deceptive 'Vote to List' interface. This domain did not employ a specific crypto drainer kit but functioned as a credential harvesting page designed to capture user login information.

Technical analysis reveals the domain registered a 2/95 detection rate on VirusTotal, indicating minimal security vendor flagging. Registered through Porkbun LLC on February 21, 2026, it resolved to IP address 63.176.8.218. The domain appeared on 1 security blocklist, showed no Google Safe Browsing detections, and had no OTX pulses. Technologies detected included Netlify and HSTS.

Currently offline after being taken down, this domain was proactively blocked by PhishDestroy. While no longer accessible, the registration details and low initial detection rate suggest potential for re-emergence. Users should remain cautious of similar domains and verify through security platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Vote to List — Powered by Moonshot

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2027-01-13 00:00:00
- Registrar: Porkbun LLC
- Country: US
- IP: 63.176.8.218
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ["dns1.p02.nsone.net", "dns2.p02.nsone.net", "dns3.p02.nsone.net", "dns4.p02.nsone.net"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c4a98-d9f9-733b-91fa-40d7d9a8cc72.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/28b787bf-f3db-45ac-96dd-20d16cdacfba
- Wayback Machine: https://web.archive.org/web/https://moonshots-trending.com
- PhishDestroy: https://phishdestroy.io/domain/moonshots-trending.com/
- LLM endpoint: https://phishdestroy.io/domain/moonshots-trending.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshots-trending.com/
Last updated: 2026-03-19