moonshot-list[.]me

The domain moonshot-list.me is a confirmed phishing site engaged in brand impersonation targeting Moonshot. It was designed to deceive users into believing they were interacting with the legitimate Moonshot platform, posing an elevated risk of credential theft or fraud. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate exposure but not eliminating prior compromise risks.

Technical indicators confirm moonshot-list.me was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Web Commerce Communications Limited on October 17, 2025, and resolved to the IPv6 address 2606:4700:3035::6815:2f14, hosted on Cloudflare's network (AS13335, US). No SSL certificate was present, and the observed page title was 'About — Moonshot'. Nameservers were erin.ns.cloudflare.com and rob.ns.cloudflare.com.

Users who interacted with moonshot-list.me should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on associated accounts, and monitor for unauthorized transactions or identity fraud. Report the phishing domain to the impersonated brand (Moonshot) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.