muonta[.]com

The domain muonta.com was registered on 2025-04-19 through IONOS SE and currently uses the dns1.namecheaphosting.com and dns2.namecheaphosting.com name servers. DNS resolution points to the IPv4 address 158.94.209.40, which remains active as of the 2026-07-21 report date. The domain is classified as a generic phishing site and is listed as high‑risk. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain as malicious, indicating that at least a small subset of scanners have identified suspicious behavior.

The domain is already blocked by the PhishDestroy service and appears on one external security blocklist, reinforcing its reputation as a threat. The registrar and hosting details suggest a relatively recent deployment, and the use of a commercial hosting provider may aid the operators in obtaining short‑lived infrastructure. No public SSL certificate details, HTTP status codes, or page‑title information have been disclosed, leaving the exact content and credential‑collection mechanisms unverified. Consequently, defenders cannot confirm the specific brand or service being impersonated, but the generic phishing label implies that the site likely attempts to harvest user credentials or personal data.

Given the active status, security teams should proactively add muonta.com to URL filtering rules, incorporate the IP address 158.94.209.40 into network‑level blocklists, and monitor DNS queries for the domain and its name‑server pair. Endpoint protection products that ingest VirusTotal feeds should already flag the domain based on the two vendor detections, but administrators should verify that those detections are propagated into their alerting pipelines. Continuous re‑scanning of the domain through sandbox or URL‑reputation services is recommended to capture any changes in payload or hosting. Organizations that rely on email filtering should ensure that messages containing muonta.