moonbirdllc[.]com

This domain, moonbirdllc.com, is flagged as a generic phishing threat and remains active under investigation. The page title 'MoonbirdLLC, coming soon' suggests a placeholder or landing page likely used to host malicious links or credential harvesting forms. No specific brand or drainer kit has been identified at this time, but the domain's infrastructure and blocklist status indicate malicious intent.

Technical indicators: VirusTotal score is 0/95 detections, meaning no antivirus engines have flagged it yet. The domain was registered through NameCheap, Inc. on February 21, 2026. It resolves to IP address 185.199.108.153, which is associated with GitHub Pages and Fastly CDN, with Varnish caching in use. The SSL certificate is issued by Let's Encrypt. The domain appears on 3 security blocklists and is explicitly blocked by MetaMask, SEAL, and PhishDestroy. Gridinsoft trust score is 0/100, indicating high risk.

Current status: The domain is active and resolving. Recommended response actions include monitoring for changes in page content, submitting the domain to additional threat intelligence platforms, and updating blocklists to include this indicator. Remaining risk is moderate to high: despite zero VT detections, the domain's registration date, blocklist presence, and infrastructure profile are consistent with phishing campaigns. Users encountering moonbirdllc.com should avoid interaction and report it to their security team.