xn--monshots-ib1d[.]net

The domain xn--monshots-ib1d.net has been identified as a brand impersonation threat specifically targeting Moonshot. This domain was designed to deceive users by mimicking the legitimate Moonshot platform, likely to harvest credentials or personal information. The page title 'Vote to List — Powered by Moonshot' suggests a phishing scheme aimed at cryptocurrency or token listing participants.

Technical analysis reveals that the domain resolves to IP address 104.21.63.112 and was created on February 21, 2026, through the registrar NiceNIC International Group Co., Limited. The SSL certificate is issued by Let's Encrypt (E8). VirusTotal reports an alarming detection rate of 8 out of 95 security vendors flagging this domain as malicious. The domain appears on one security blocklist but is notably absent from Google Safe Browsing (GSB) blacklists, indicating potential gaps in real-time protection.

As of the latest assessment, the domain has been taken offline, reducing immediate risk. However, the unique seed d294f4 suggests this could be part of a broader phishing campaign. Users who may have interacted with this domain should change their Moonshot credentials immediately and enable two-factor authentication. PhishDestroy recommends monitoring for similar domains using Moonshot branding and reporting any suspicious sites to cybersecurity authorities. While the immediate threat is neutralized, the underlying infrastructure may be reused, so continued vigilance is advised.