moonshot-ranks[.]net

Analysis of the domain moonshot-ranks.net indicates that it is actively impersonating the brand Moonshot. The domain was created on March 22, 2026, and is currently listed as active. The page title appears as 'Index of /', which is indicative of an unstructured or misconfigured web server, potentially used to host unauthorized content or facilitate domain impersonation. Infrastructure analysis reveals that the domain is utilizing Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which may provide some level of obfuscation regarding the true nature of the site. It resolves to the IP address 104.21.13.33, which does not raise immediate flags in terms of known malicious activity, as it has a VirusTotal score of 0/95 and a Gridinsoft trust score of 0/100, suggesting that it has not yet been flagged by many threat detection services.

However, the domain's presence on two security blocklists and its involvement in 23 threat intelligence pulses on AlienVault OTX are significant indicators of its potential malicious intent. The domain has been reported as impersonating Moonshot, and it is currently blocked by specific security solutions such as PhishDestroy and BLP-Malware. The SSL certificate is issued by Let's Encrypt, which is commonly utilized by both legitimate and illegitimate domains, adding complexity to the threat assessment.

Given these observations, there is a clear need for vigilance from the brand Moonshot and associated stakeholders. It is advisable to monitor any user reports of phishing attempts associated with this domain and to educate users on identifying legitimate communications from Moonshot. Furthermore, ongoing investigations should be conducted to assess the impact of this impersonation and to determine any necessary legal actions to mitigate risks associated with potential brand damage.