moonshot[.]money-v[.]id

PhishDestroy has identified moonshot.money-v.id as an elevated-risk brand impersonation threat specifically targeting Moonshot. This domain is designed to trick users into believing they are interacting with the legitimate Moonshot platform, but it is actually a crypto drainer aimed at stealing cryptocurrency assets. The site was taken offline after being flagged, but similar threats may appear under different domains.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged this domain with 3 out of 95 security vendors detecting it as malicious. The domain was registered through Cloudflare, Inc. and hosted on IP address 172.67.181.182, with an SSL certificate issued by Google Trust Services (WE1). Notably, the domain appears on 2 security blocklists, further confirming its dangerous nature. The page title "About — Moonshot" was used to create a convincing facade.

To protect against this type of crypto drainer attack, users should always verify the authenticity of any Moonshot-related website by visiting only the official domain directly. Never connect a cryptocurrency wallet or enter private keys on sites reached through unsolicited links or search ads. If you encounter moonshot.money-v.id or similar domains, report them immediately and check PhishDestroy for updated blocklists and safety warnings.