x-moonshot[.]org

The domain x-moonshot.org has been identified as a phishing site that engages in brand impersonation, specifically targeting the brand Moonshot. It has been taken offline, indicating that the threat it posed is currently mitigated, but caution is advised as it could resurface or have lingering effects on potential victims searching for a safe online experience associated with the legitimate brand.

Technical indicators for x-moonshot.org include detections from 2 of 95 VirusTotal vendors, with Fortinet and SOCRadar among the detecting vendors. The domain was registered through NiceNIC International Group Co., Limited, with a creation date of February 28, 2026. It resolves to the IP address 104.21.47.109 and appears on 3 distinct security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain is secured by an SSL certificate issued by Let's Encrypt / E7, identifying a layer of superficial legitimacy.

For individuals that may have interacted with x-moonshot.org, it is crucial to implement safety measures. If there was any possibility of cryptocurrency drainage, users should revoke token approvals and transfer any funds to a new wallet. In cases of credential or login phishing, changes to passwords should be made immediately, and it's advisable to enable two-factor authentication (2FA) on all accounts. Any suspicious activity related to x-moonshot.org should be reported to relevant authorities and through appropriate channels to prevent further scams.