moretown[.]xyz

Moretown.xyz, a phishing domain, has been taken down after being flagged by 4 out of 91 vendors on VirusTotal. It was hosted on Amazon infrastructure, specifically IP 54.215.31.113 in the US. The domain was first detected by PhishDestroy in June 2026, indicating its recent activity before being shut down.

The domain was registered with Dynadot Inc and utilized Let's Encrypt for SSL certification, which is common among phishing sites due to its free and automated nature. Despite its short-lived operation, moretown.xyz managed to gain attention from multiple security vendors and was included in one public blocklist, specifically PhishDestroy's.

The platform risk score for moretown.xyz was 56 out of 100, with an abuse score of 21 out of 100. These metrics suggest a moderate level of threat during its active period. The swift detection and subsequent takedown of the domain highlight the importance of timely threat intelligence in mitigating phishing risks. The domain's offline status underscores the effectiveness of coordinated efforts between security vendors and hosting providers.