Domain Security Reports
Search our database of flagged domains. Check if a website is a scam, phishing, or legitimate.
How This Attack Works
The Moonshot Scam is a sophisticated phishing technique designed to exploit users' trust and steal sensitive information.
STEP 1
Initiation
Scammers register domains with deceptive names to mimic legitimate sources.
STEP 2
Distribution
Phishing emails or messages are sent to potential victims, directing them to the fraudulent websites.
STEP 3
Engagement
Users are lured into inputting sensitive information, believing they are interacting with a legitimate entity.
STEP 4
Exploitation
Captured data is used to execute unauthorized transactions or sold on the dark web.
Technical Analysis
The Moonshot Scam utilizes advanced phishing tactics, often employing lookalike domains and SSL certificates to lend authenticity. Attackers use HTML and JavaScript to create convincing replicas of legitimate websites. They may also employ social engineering techniques to increase engagement. In cases involving cryptocurrencies, malicious actors exploit smart contract vulnerabilities, executing functions that siphon funds from unsuspecting victims. The infrastructure often includes compromised servers and proxy networks to hide the origin of attacks, making detection and takedown efforts challenging.
Real Cases
Moonshot Crypto Heist (2024)
$12 million stolen
A phishing campaign targeting cryptocurrency investors, leading to significant financial losses.
Moonshot Investment Fraud (2023)
$5 million stolen
Scammers posed as a legitimate investment firm, deceiving users into transferring funds.
Moonshot Retail Breach (2024)
$3 million stolen
A retail website was mimicked, capturing customer credit card details and personal information.
How to Detect
Mismatched domain names or slight misspellings
Unusual or unexpected email requests
Websites lacking HTTPS security
Requests for personal information without verification
Poor grammar or spelling errors in communication
How to Protect Yourself
1
Verify URLs before clicking, ensuring they match legitimate sites
2
Use two-factor authentication for all accounts where available
3
Regularly update passwords and use password managers
4
Educate yourself about common phishing tactics and stay informed
5
Report suspicious activity to PhishDestroy and relevant authorities
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 680 domains tracked for this threat type