moonshot-quest[.]com

This domain, moonshot-quest.com, is flagged as an active cryptocurrency phishing site targeting the Moonshot brand. Registered on March 3, 2026, through Hello Internet Corp, the domain currently resolves to 188.114.96.3, hosted on Cloudflare’s infrastructure (AS13335). Analysis indicates the site employs a 301 HTTP redirect and presents an 'Index of /' page title, suggesting either misconfiguration or deliberate obfuscation of its content. The SSL certificate, issued by Let’s Encrypt (serial E7), does not mitigate the risk, as phishing domains frequently use valid certificates to appear legitimate. Infrastructure analysis reveals the domain uses Cloudflare nameservers (abby.ns.cloudflare.com, finley.ns.cloudflare.com) and additional Cloudflare technologies, including Browser Insights and HTTP/3. These choices align with common phishing tactics to leverage CDN services for anonymity and resilience. The domain appears on three security blocklists, and one of 95 security vendors on VirusTotal has flagged it as malicious. While this detection rate is low, it does not rule out active threats, particularly given the domain’s association with cryptocurrency scams. The exact nature of the phishing content remains uncertain, as the page title ('Index of /') does not provide sufficient detail. However, the combination of brand impersonation, cryptocurrency scam classification, and active status warrants immediate defensive action. Defenders should block the domain at the DNS or network level, monitor for connections to 188.114.96.3, and alert users to potential cryptocurrency-related fraud linked to this infrastructure. Given the domain’s registration age and active status, further monitoring is recommended to track any changes in behavior or additional detections.