share-moonshot[.]network

PhishDestroy first observed share-moonshot.network on Jun 8, 2026. The hostname explicitly references Moonshot; stored content metadata identifies the same apparent target. Current evidence score: 92/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 14 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, SOCRadar, Sophos, VIPRE, Webroot on Jul 29, 2026 at 08:27 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 14:20 UTC. Non-positive and contextual checks: AlienVault OTX listed 5 community pulse references (not vendor detections) on Jul 29, 2026 at 08:29 UTC. Google Safe Browsing returned no flag on Jul 29, 2026 at 08:27 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:32 UTC; content was unavailable. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Jun 6, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 69.46.46.62 on AS400940 (Railway). The recorded endpoint location is Seattle, US.

Neither a page title nor a landing-page capture is stored. The content indicators and 3 positive source findings support the current Moonshot impersonation and phishing classification. The target field identifies Moonshot, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.