moonshot-rank[.]org

The domain moonshot-rank.org is a confirmed phishing site engaged in brand impersonation targeting Moonshot, a cryptocurrency platform. It operated as a cryptocurrency scam designed to deceive users into interacting with fraudulent content, though no specific drainer kit was identified. As of the latest verification, moonshot-rank.org has been taken offline, but its prior activity poses a residual risk to users who may have engaged with it.

Technical indicators confirm the elevated risk level of moonshot-rank.org. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 05, 2026, it resolved to the IP address 104.21.69.210, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate was present, and the observed page title was 'Just a moment...'. Nameservers were marek.ns.cloudflare.com and mariah.ns.cloudflare.com, with a Gridinsoft trust score of 0/100.

Users who interacted with moonshot-rank.org should take immediate safety steps. For cryptocurrency-related exposure, revoke any token approvals granted to the domain and transfer funds to a new wallet. Monitor accounts for unauthorized transactions and enable two-factor authentication (2FA) on all platforms. Victims should report the phishing domain to their wallet provider, local cybercrime authorities, and platforms like Google Safe Browsing or PhishTank to prevent further abuse. If credentials were entered, change passwords immediately and watch for signs of fraud or identity theft.