artemismoon[.]fun

PhishDestroy identifies artemismoon.fun as an active credential harvesting domain, posing a high risk to users who may unknowingly input sensitive login details. The site was flagged as a generic phishing threat on April 1, 2026, and remains under investigation due to its recent creation and low detection rates.

This domain was registered through HOSTINGER operations, UAB, and was created on March 31, 2026. It resolves to IP address 2.57.91.217 and utilizes a Let's Encrypt SSL certificate. VirusTotal currently shows 1 out of 95 detections, indicating no blocklists or security vendors have flagged it yet. The domain’s age and lack of reputation make it a prime candidate for phishing campaigns targeting unsuspecting users.

Users should avoid interacting with artemismoon.fun entirely. If credentials were entered, immediately change passwords and enable multi-factor authentication on all associated accounts. Report the domain to your email provider, browser, and security platforms. Network administrators should block the domain and IP address at the firewall level to prevent further exposure.