autismonsol[.]fun

Analysis conducted on July 23, 2026 identifies autismonsol.fun as a high‑risk brand‑impersonation infrastructure targeting the Moonshot brand. The domain was registered on March 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. Nameserver delegation points to connie.ns.cloudflare.com and rocco.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. No TLS certificate is presented; the site operates without HTTPS, which further reduces trust signals. Public threat‑intelligence sources have placed the domain on three security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal scans returned 12 detections out of 94 vendors, indicating that a majority of scanners consider the domain malicious. The observed page title “Vote to List — Powered by Moonshot” directly references the targeted brand, reinforcing the impersonation claim. The current HTTP status is reported as offline, meaning the host no longer serves content at the time of analysis. Because the site is inactive, visual or functional confirmation of the phishing page cannot be obtained, leaving the exact payload or credential‑capture mechanisms uncertain.

Nevertheless, the combination of brand‑specific page title, multiple blocklist listings, and positive VirusTotal detections provides strong evidence of malicious intent. Defenders should continue to block the domain at network perimeter and DNS layers, update any internal threat‑intel feeds with the observed indicators, and monitor the associated IP address for any future activation. Because the domain uses Cloudflare’s infrastructure, any re‑hosting of the malicious site could occur behind the same IP range, so blanket blocking of the IP 188.114.96.3 may be justified pending further investigation.