# moontaurus-com.pages.dev — SUSPICIOUS

> PhishDestroy identifies moontaurus-com.pages.dev as a live phishing site (4/95 vendors flagged). Avoid crypto investment lures—block immediately and report.

## Summary
PhishDestroy identifies moontaurus-com.pages.dev as an elevated-risk phishing domain currently active and distributing fraudulent investment content targeting cryptocurrency users. The domain presents itself as a legitimate financial platform while harvesting credentials and digital assets from unsuspecting victims. Technical telemetry confirms ongoing malicious hosting and reputation erosion, warranting immediate blocking and user caution.  This domain was flagged by 4 out of 95 VirusTotal security vendors, indicating partial but not universal detection. It resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., leveraging Google Trust Services for SSL encryption. The use of Google Trust Services is a common tactic to lend false legitimacy to fraudulent sites, while Cloudflare’s infrastructure provides anonymity and rapid rotation capabilities to evade takedowns. The site operates under a Cloudflare Pages.dev subdomain, a platform often abused for quick deployment of spoofed financial portals.  Given the confirmed presence of a generic phishing payload aimed at financial credential theft, users are strongly advised not to interact with any links or content on this domain. The risk of direct financial loss is elevated due to the domain’s active, live status and partial vendor detection. To mitigate exposure, block the domain moontaurus-com.pages.dev at the network level and report the URL to your browser or email security provider. If you have previously entered credentials or cryptocurrency wallet details on this site, immediately revoke API access, change passwords, and transfer assets to a secure, offline wallet. Enhanced monitoring of financial accounts is recommended for at least 60 days following potential exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/689d9097-3e71-4b8b-a2e1-ef6ef6ee9cd6
- PhishDestroy: https://phishdestroy.io/domain/moontaurus-com.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/moontaurus-com.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moontaurus-com.pages.dev/
Last updated: 2026-04-13