moonshot-new[.]xyz

The domain moonshot-new.xyz was identified as a brand‑impersonation attempt targeting the Moonshot brand. It was registered on 12 November 2025 through Web Commerce Communications Limited. Authoritative nameservers austin.ns.cloudflare.com and candy.ns.cloudflare.com resolve the A record to 172.67.134.203, an address owned by AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented, indicating the site was either served over plain HTTP or is currently offline; the current status is taken offline as of 25 July 2026.

VirusTotal analysis shows nine of ninety‑three scanners flag the domain as malicious, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, and is listed on two additional blocklists. The page title returned from the site is “Moonshot,” matching the targeted brand, but the underlying page content has not been captured, leaving the exact malicious payload or user‑interaction flow uncertain.

Defenders should block DNS resolution to the IP address, add moonshot-new.xyz to URL filtering and email security policies, and monitor other domains hosted on the same Cloudflare IP range for similar brand‑impersonation activity. Because the registrar is Web Commerce Communications Limited, contacting the registrar for takedown assistance is advisable. Ongoing re‑scanning with updated detection engines is recommended to capture any future changes in the domain’s behavior.