moonpay-support-number[.]daftpage[.]com

PhishDestroy identifies moonpay-support-number.daftpage.com as a high-risk domain engaged in brand impersonation, specifically targeting Facebook. This domain was registered with the explicit intent to deceive users into believing it is an official support channel for MoonPay, a popular cryptocurrency service. The threat level is elevated due to the sophisticated nature of the impersonation and the domain's active status before being taken offline.

Technical indicators reveal a deeply suspicious profile. The domain was created on October 24, 2021, and is registered through OVH, SAS, a provider often abused for fraudulent purposes. It resolves to IP address 216.150.16.65 and uses a Let's Encrypt / R13 SSL certificate to falsely appear legitimate. VirusTotal analysis shows 9 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The page title, “MoonPay Support Number,” is a direct attempt to lure users seeking customer support, but the domain actually impersonates Facebook, suggesting a broader phishing scheme.

Users who encounter this domain should take immediate action. Since the domain is now offline, it poses no current threat, but any interaction prior to takedown could have compromised personal data. Affected individuals should change passwords for Facebook and any other accounts where they may have entered credentials. Enabling two-factor authentication on all accounts is strongly recommended. Monitor financial accounts for suspicious activity and report the domain to relevant authorities. For future safety, always verify support numbers through official websites and avoid clicking on unsolicited links or advertisements offering customer service.