app[.]moonwell[.]click

PhishDestroy identifies app.moonwell.click as a domain involved in generic phishing, which is currently offline. The domain does not appear to impersonate a specific brand.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating a potential threat, and is registered through Dynadot, LLC, with an IP address of 188.114.96.3. It was created on April 29, 2026, and appears on 1 security blocklist, suggesting a notable risk level. The SSL certificate is issued by Let's Encrypt / E8, which may be an attempt to appear legitimate.

Given the current offline status of app.moonwell.click, it is crucial for users to remain cautious when encountering similar domains, as they may be part of a larger phishing campaign. It is recommended to avoid interacting with such domains and to prioritize verifying the authenticity of websites before providing sensitive information. The fact that only 1 out of 95 security vendors flagged this domain highlights the importance of continuous monitoring and the need for a comprehensive security approach to mitigate potential threats.