moonshot-enter[.]com

PhishDestroy identifies moonshot-enter.com as an active brand impersonation domain targeting Moonshot. This domain mimics the legitimate Moonshot brand to deceive users and facilitate fraudulent activities, including potential credential theft or crypto-draining schemes. The site exhibits clear signs of impersonation, leveraging branding elements to appear authentic while hosting malicious infrastructure. moonshot-enter.com resolves to IP 216.150.16.193 and was registered through Name.com, Inc. on April 28, 2026. The domain holds a Let’s Encrypt SSL certificate, which may be used to lend false credibility. VirusTotal currently reports 2/95 detections, indicating no immediate flagging by security vendors, though this domain remains under active investigation for malicious intent. Additional technical indicators include its recent creation date, reliance on a reputable registrar, and the absence of a Google Safe Browsing (GSB) blocklist entry at the time of writing. This domain is currently active and poses a credible risk due to its impersonation of the Moonshot brand. Users and organizations are advised to block access to moonshot-enter.com immediately and monitor for any associated malicious activities. The remaining risk is assessed as significant due to the domain's recent activation and lack of widespread detection. Immediate containment and user awareness are critical to mitigate potential harm.