moornpay[.]com

PhishDestroy has identified moornpay.com as a generic phishing domain, a type of fraudulent website designed to deceive users into revealing sensitive information. While no specific brand impersonation or crypto drainer kit has been linked to this domain, its characteristics strongly suggest a phishing operation. The domain was registered on May 16, 2026, through Tucows Domains Inc., a registrar often abused by malicious actors. Its recent creation date is a common red flag for fraudulent sites.

Technical indicators paint a clear picture of risk. VirusTotal reports that 8 out of 95 security vendors flag this domain as malicious, a significant detection rate that underscores its dangerous nature. Additionally, moornpay.com appears on 3 security blocklists and is listed in 1 AlienVault OTX threat intelligence pulse, indicating active monitoring by the cybersecurity community. The domain is currently offline, likely due to a takedown action by the registrar or hosting provider, but such domains can be reactivated or moved to new infrastructure.

Given the elevated risk level and the domain's presence on multiple blocklists, PhishDestroy advises users to avoid any interaction with moornpay.com. Although it is offline now, similar domains may reappear. Users who have already visited the site should change passwords and monitor accounts for suspicious activity. PhishDestroy recommends always verifying URLs through its platform and maintaining up-to-date security software to guard against evolving phishing threats.