user[.]moonshotplatform[.]info

This domain is flagged as a high-risk brand impersonation threat targeting Moonshot. Analysis confirms the domain user.moonshotplatform.info is currently active and resolved to IP address 199.247.24.163. The domain was registered through Gransy, s.r.o., a registrar known for minimal verification practices. SSL certificate was issued by Let's Encrypt, which is commonly abused in phishing campaigns due to its free automated issuance. VirusTotal detection data shows 5 out of 95 security vendors flagging this domain as malicious, and it appears on two security blocklists (PhishDestroy and BLP-Malware). The page title was observed as 'Moonshot Platform', directly impersonating the Moonshot brand. Infrastructure details such as ASN and hosting country are not available in the current intelligence. Defenders should treat this domain as an active threat. Recommended actions include blocking the domain and associated IP at network perimeter, monitoring for any subdomains or related domains registered through the same registrar, and reporting the domain to the brand owner for takedown coordination. The exact content of the landing page has not been analyzed, but the combination of brand impersonation, low detection rate, and active status indicates a credible phishing risk requiring immediate mitigation.