xn--moonshts-r3a[.]app

The domain xn--moonshts-r3a.app is a phishing site involved in brand impersonation targeting the Moonshot brand. It poses an elevated risk by attempting to deceive users through a scam that mimics legitimate Moonshot services. The site has been taken offline, reducing immediate threat but warranting caution for anyone who interacted with it. Users searching whether xn--moonshts-r3a.app is safe or a scam should consider it unsafe due to its phishing nature and impersonation tactics.

Technical analysis reveals that xn--moonshts-r3a.app was created on February 21, 2026, and is registered through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.97.3, located in the US under AS13335 Cloudflare, Inc. The domain uses Cloudflare services including HTTP/3 and is secured with a Let's Encrypt / E7 SSL certificate. It appears on three security blocklists—PhishDestroy, MetaMask, and SEAL—and has been flagged by 2 of 95 VirusTotal vendors, including Seclookup and SOCRadar. The observed page title was 'Vote to List — Powered by Moonshot,' indicating its intent to mimic the Moonshot brand.

For safety, users who encountered xn--moonshts-r3a.app should be vigilant for potential phishing attempts and avoid providing any credentials or sensitive information. It is recommended to change passwords associated with Moonshot accounts, enable two-factor authentication, and monitor accounts for suspicious activity. Any suspected phishing attempts involving this domain should be reported to relevant security teams and blocklist providers to help prevent further victimization.