secure-moonapy[.]my[.]canva[.]site

The domain secure-moonapy.my.canva.site has been identified as a credential phishing site impersonating Moonpay. As of the latest assessment, the domain is currently offline. The specific threat posed by this domain involves attempts to steal user credentials, potentially leading to financial loss and identity theft.

Analysis indicates that the domain was flagged by 11 of 95 VirusTotal security vendors, suggesting a moderate level of detection among security platforms. The domain is registered through GANDI SAS and resolves to the IP address 103.169.142.6, which is located in Australia and associated with AS209242 Cloudflare London, LLC. The SSL certificate is issued by Google Trust Services / WE1, which could be used to gain user trust. The domain was created on April 03, 2018, and appears on 1 security blocklist, indicating a history of malicious activity. The elevated risk level is justified by the domain's current offline status and its presence on security blocklists.

Given the current offline status of secure-moonapy.my.canva.site, it is recommended that users remain vigilant and avoid interacting with this domain should it become active again. Organizations and individuals should update their security systems to include this domain in their blocklists and monitor for any similar domains that may arise. Additionally, conducting regular security awareness training to recognize phishing attempts and ensuring multi-factor authentication (MFA) is enabled on all critical accounts can significantly reduce the risk of credential theft.