betmoon120[.]com

betmoon120.com is a recently active crypto drainer phishing domain currently under investigation for its involvement in fraudulent cryptocurrency transactions. This domain mimics legitimate crypto-related platforms to trick users into connecting their digital wallets, where funds are then illicitly drained. The threat is classified as an active crypto drainer phishing operation.

PhishDestroy's analysis reveals this domain was registered through NAMECHEAP INC, resolving to the IP address 188.114.96.3. The domain was created on March 25, 2026, and currently exhibits a clean record with no flagged detections on VirusTotal (0 out of 95 vendors). As of now, it remains unlisted on any known blocklists and holds neutral trust scores across various threat intelligence platforms. The SSL certificate, issued by Let's Encrypt, adds a superficial layer of legitimacy, though it does not validate the site's safety.

Given the absence of immediate detections but the high-risk nature of its operation, PhishDestroy advises extreme caution. Users should avoid interacting with betmoon120.com or any associated links. If exposure has occurred, immediately disconnect wallets, revoke any connected permissions, and transfer remaining assets to a secure wallet. For verification, use PhishDestroy's real-time scanning tool to confirm the domain's status before engaging. This domain remains under active surveillance, and updates will be provided as new intelligence emerges.