moonshot-listers[.]live

PhishDestroy identifies the domain moonshot-listers.live as an active brand impersonation scam targeting Moonshot users. The site currently operates with an under-investigation status, meaning its malicious operations have not yet been confirmed but remain highly suspicious due to impersonation tactics. This domain masquerades as a legitimate Moonshot service, posing a direct threat to users who may unknowingly submit sensitive credentials or personal data to the fraudulent portal. Security researchers and end-users are advised to treat this domain with extreme caution and avoid any interaction.

This domain resolves to IP address 216.150.16.129 and is secured via a Let's Encrypt SSL certificate, which may lend false legitimacy. According to VirusTotal scans conducted on [current date], moonshot-listers.live has not been flagged by any of the 95 participating security vendors, indicating a delay in detection despite its active impersonation campaign. The domain is currently unblocked and accessible, with no recorded presence on major threat intelligence blocklists. Trust scores remain unverified, and historical data shows no prior reputation, reinforcing the need for immediate scrutiny. The lack of detection underscores the stealthy nature of this campaign and the importance of proactive monitoring.

As of today, moonshot-listers.live remains active and poses a high risk to unsuspecting users. Concrete indicators include the false impersonation of Moonshot, misleading SSL credentials, and zero VirusTotal detections—demonstrating a sophisticated evasion strategy. Users should immediately block access to this domain at the network level and avoid visiting or submitting any information. Organizations are advised to update firewall rules, DNS sinkholes, and endpoint protection policies to include moonshot-listers.live. Security teams should monitor for related domains and report any observed phishing activity to Moonshot and relevant threat intelligence platforms. Immediate isolation and takedown efforts are strongly recommended to mitigate potential credential theft and financial fraud.