moonshot-opn[.]com

The domain moonshot-opn.com has been identified as a brand impersonation threat targeting Moonshot. Analysis confirms this domain was actively engaged in phishing operations designed to mimic legitimate Moonshot branding, as evidenced by the page title 'Vote to List — Powered by Moonshot.' The domain is currently offline, though prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence platforms. It was registered through Name.com, Inc. on June 05, 2026, and resolved to the IP address 216.150.1.65. The domain appears on two security blocklists and was proactively blocked by at least two external security mechanisms. Detected technologies include Vercel, Unpkg, and HSTS, while the SSL certificate was issued by Let's Encrypt. These indicators align with common phishing infrastructure patterns. Current status confirms the domain has been taken offline, reducing immediate risk. However, organizations should remain vigilant for similar impersonation attempts. It is recommended to block the domain and associated IP (216.150.1.65) at the network perimeter, update endpoint protection rules to include this indicator, and monitor for any resurgence or related domains leveraging the same infrastructure. Security teams should also review logs for prior connections to this domain to assess potential exposure.