moonslogin[.]guru

Moonslogin.guru, a credential phishing domain, is currently offline but had been flagged by 10 out of 91 vendors on VirusTotal. This domain is also listed on three public blocklists, including those maintained by MetaMask and SEAL. The domain was registered through Global Domain Group LLC and hosted on an IP address managed by Cloudflare, Inc., located in the United States.

The domain was created on June 17, 2026, and PhishDestroy detected it just two days later, on June 19, 2026. Moonslogin.guru's platform risk score is notably high at 90 out of 100, indicating a significant threat level during its active period. The site's SSL certificate was issued by Google Trust Services, which is a common practice among phishing sites to appear legitimate.

Despite being taken down, the domain's rapid detection and inclusion in multiple blocklists highlight the ongoing vigilance required to combat phishing threats. The 10 detections on VirusTotal demonstrate the domain's malicious nature, while its presence on public blocklists underscores the broader recognition of its threat potential. Moonslogin.guru serves as a reminder of the importance of early detection and swift action in mitigating the risks posed by phishing domains.