moonpay[.]co[.]in

moonpay.co.in is currently under investigation for potential brand impersonation attacks targeting users seeking legitimate financial or cryptocurrency services. This domain closely resembles a well-known brand name, which may be used to deceive users and harvest sensitive information such as login credentials or financial details. The threat primarily revolves around the risk of credential theft and unauthorized account access resulting from successful impersonation.

Technical analysis reveals the domain resolves to IP address 147.93.31.70 and remains active at the time of reporting. The domain was registered through GoDaddy and has a creation date of May 14, 2026. According to VirusTotal analysis, there are currently 0 out of 95 engines flagging this domain, indicating it is not yet detected on major blocklists. No additional blocklist coverage has been observed. The domain's recent registration and lack of detection suggest it may be early in its lifecycle or not yet widely distributed.

Users who have interacted with moonpay.co.in are advised to immediately discontinue use and avoid entering any sensitive information on the site. Those who have already provided credentials or financial data should change passwords and monitor affected accounts for suspicious activity. It is also recommended to report the domain to relevant authorities or security teams for further investigation and potential takedown.