moonshot-app[.]pro

This domain, moonshot-app.pro, poses a threat by impersonating the legitimate brand Moonshot. It was designed to deceive users into believing they are interacting with the real Moonshot website, potentially leading to the theft of sensitive information such as login credentials, financial data, and personal details. The risk level is elevated due to the domain's presence on multiple security blocklists and its ability to bypass some security filters.

Analysis indicates that moonshot-app.pro was created on March 11, 2026, and has been flagged by 6 out of 95 security vendors on VirusTotal. The domain is registered through NiceNIC International Group Co., Limited, a registrar that has been associated with other malicious domains. Technical indicators include the use of HSTS, Cloudflare Browser Insights, Cloudflare, and HTTP/3, which can enhance the site's credibility and make it more difficult to detect as a phishing site. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites to gain user trust.

If a user has visited moonshot-app.pro, they should immediately change their passwords for any Moonshot accounts and monitor their financial statements for any unauthorized transactions. It is also recommended to run a full system scan using updated antivirus software to ensure that no malicious software was installed. Users should report any suspicious activity to their security team and avoid clicking on links or entering personal information on any unfamiliar websites claiming to be Moonshot.