moonshot-listing[.]quest

The domain moonshot-listing.quest poses a high-risk threat due to its involvement in brand impersonation. Specifically, it impersonates the Moonshot brand, aiming to deceive users through fraudulent representation. The domain, now offline, was identified by its page title 'Vote to List — Powered by Moonshot', which suggests an attempt to engage users in fake activities associated with the brand.

Detailed analysis reveals that the domain was registered through Dynadot LLC and resolves to IP address 104.21.29.202. It was created on April 20, 2026, suggesting recent activity in the threat landscape. The domain is flagged by 17 out of 95 security vendors on VirusTotal, a significant detection rate indicating its malicious nature. Additionally, it appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL, bolstering its classification as a high-risk entity. The domain's trust score on Gridinsoft is 0 out of 100, reflecting its complete lack of credibility. Furthermore, the domain has been observed in one threat intelligence pulse on AlienVault OTX, highlighting its recognition within security communities.

Given the specific nature of this threat as brand impersonation, individuals and organizations should remain vigilant when interacting with domains mimicking recognized brands. Preventive measures include verifying domain authenticity through known registrars and avoiding interactions with newly created domains claiming affiliation with reputable brands. Security tools should be kept updated to recognize and block such domains at the network level. For organizations, employee training on recognizing phishing attempts and brand impersonation can substantially reduce the risk of falling victim to such schemes.