MALICIOUS — CRITICAL
join-moonshot[.]fun
1 of 94 security engines flagged the domain; 3 public blocklists listed it (MetaMask, ScamSniffer, SEAL); the latest stored check returned HTTP 502.
- VirusTotal
- 1/94
- Blocklists
- 3 · MetaMask, ScamSniffer
- उपलब्धता
- सामग्री अनुपलब्ध · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
join-moonshot.fun — सामग्री अनुपलब्ध (HTTP 502). ब्रांड प्रतिरूपण: Moonshot; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 1/94 (Trustwave); URLQuery 2 alerts; URLScan malicious verdict; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. रजिस्ट्रार: PDR.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Evidence Analysis
join-moonshot.fun was observed hosting a page titled “Vote to List — Powered by Moonshot”. The page title indicates an attempt to exploit the Moonshot brand, and the domain is classified as a crypto-scam impersonating Moonshot. Technical lookup shows the domain resolves to 172.67.177.238, an address owned by Cloudflare (AS13335) located in the United States. The domain uses Cloudflare’s DNS infrastructure, with authoritative name servers sri.ns.cloudflare.com and meiling.ns.cloudflare.com, and the site was served over HTTP/3 with Cloudflare Browser Insights enabled. No TLS certificate was presented, confirming the absence of HTTPS protection.
Registration data reveals the domain was created on 7 March 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Reputation services assign a Gridinsoft trust score of 0 out of 100, and four independent blocklists (PhishDestroy, MetaMask, ScamSniffer, SEAL) have already listed the domain. VirusTotal recorded a single positive detection among 94 scanning engines, and the domain appears on four additional security blocklists. The site’s current status is offline, which limits active probing, but the historical evidence suggests a short-lived malicious campaign aimed at tricking users into a cryptocurrency-related fraud.
Uncertainties remain regarding the exact payload or money-flow mechanisms because the page content has not been captured. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated Cloudflare IP range, and add the domain to internal watchlists. Network telemetry that shows HTTP/3 traffic to 172.67.177.238 should be flagged, and any attempts to interact with Moonshot-related services from this host should be investigated. Ongoing verification of the domain’s status and periodic re-scanning are recommended to capture any re-activation.
डेटा कवरेज12 recorded checks
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of join-moonshot.fun · checked Mar 8, 2026
साक्ष्य और बाहरी रिपोर्टेंIndependent lookups and source reports
PD-20260307-7D4BBD Recipient: abuse@publicdomainregistry.com Victim safety and official reportingImmediate actions and verified reporting channels
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।