moonshot-pump[.]app

This domain, moonshot-pump.app, operates as a fraudulent impersonation of the legitimate Moonshot cryptocurrency platform. Analysis indicates the site is designed to deceive users into entering sensitive wallet credentials or approving malicious transactions, which would result in unauthorized access and theft of digital assets. The infrastructure mimics official Moonshot branding to exploit trust and urgency, commonly associated with crypto-related scams targeting both novice and experienced users. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on January 12, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to IP address 172.67.204.218, hosted on Cloudflare infrastructure (AS13335), which is often leveraged to obscure the true origin of phishing sites. Security vendors on VirusTotal have flagged this domain as malicious, with 17 out of 95 engines detecting it as a phishing threat. Additionally, the domain appears on two security blocklists and is actively blocked by multiple threat intelligence platforms. If you or someone you know has interacted with moonshot-pump.app, immediate action is required to mitigate potential damage. First, disconnect any connected wallets from the site and revoke any suspicious token approvals using a blockchain explorer or a dedicated revocation tool. Next, change passwords and enable multi-factor authentication on all cryptocurrency-related accounts. Monitor wallet activity closely for unauthorized transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Report the incident to relevant cybersecurity organizations to aid in tracking and takedown efforts.