moonshot-list[.]live

PhishDestroy has identified an active brand impersonation phishing site hosted at www.moonshot-list.live that mimics the legitimate Moonshot brand. This domain is designed to deceive users into believing it is an official Moonshot platform, potentially tricking visitors into entering sensitive credentials or downloading malicious content under false pretenses. The threat actor behind this campaign is leveraging a recently registered domain to exploit brand recognition and bypass initial scrutiny, making it a critical risk for unsuspecting users. This domain was flagged by PhishDestroy during routine threat intelligence monitoring. Key indicators include 0 detections out of 95 VirusTotal scans, indicating it is currently undetected by most antivirus engines. The domain uses a Let's Encrypt SSL certificate, which may lend it an air of legitimacy, and resolves to the IP address 216.150.16.65. The domain registration details and creation timeline are under further investigation to trace the threat actor's infrastructure and intentions. If you have visited www.moonshot-list.live, immediately cease any interactions with the site and avoid entering any personal or financial information. Scan your device for malware using up-to-date antivirus software and monitor your accounts for unusual activity. Report the domain to your organization's security team or to PhishDestroy for further analysis. Do not click on any links or download files from this domain to prevent potential compromise of your credentials or device.