share-moonshot[.]com

share-moonshot.com is currently flagged as a high‑risk brand‑impersonation site targeting the Moonshot brand. VirusTotal records show that 10 of 91 scanned security vendors have flagged the domain, indicating a notable detection rate. The domain appears in four AlienVault OTX threat‑intel pulses and is listed on one public security blocklist, reinforcing its malicious reputation. DNS resolution points to the Cloudflare‑hosted IP address 188.114.97.3, which is geolocated to Canada and is served by Cloudflare, Inc. The authoritative nameservers are donovan.ns.cloudflare.com and selah.ns.cloudflare.com, both typical of Cloudflare‑managed domains. HTTPS is provided by a Let’s Encrypt certificate (E7), but the web server returns HTTP status 523 with the page title “share‑moonshot.com | 523: Origin is unreachable,” suggesting that the origin server is not currently reachable. Registration data indicates the domain was created on 27 May 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, and the domain remains active. PhishDestroy has already added the domain to its blocklist, and no additional content has been observed. Defenders should block the domain at network and endpoint layers, continue to monitor for any related infrastructure, and treat any communications purporting to originate from share‑moonshot.com as malicious.