moonshot-lead[.]com

The domain moonshot-lead.com was first registered on December 20, 2025 through Name.com, Inc. It resolves to the IP address 216.198.79.1, which belongs to the Amazon.com, Inc. network (AS16509) located in the United States. DNS resolution is delegated to ns1.vercel-dns.com and ns2.vercel-dns.com, indicating that the site leveraged Vercel’s hosting platform. The HTTPS endpoint presented a Let’s Encrypt (R12) certificate and advertised HTTP Strict Transport Security (HSTS), suggesting an attempt to convey a legitimate security posture. The page title returned by the server was “Vote to List — Powered by Moonshot,” aligning with the declared brand target of Moonshot and the listed scam type of a crypto‑related fraud.

HTTP responses returned status code 451, which typically signals legal takedown or unavailability, and the current operational status is marked as offline. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scans reported three positive detections out of ninety‑three vendor checks, providing modest corroboration of malicious activity.

No additional intelligence such as Safe Browsing verdicts, OTX indicators, or detailed payload analysis is available at this time. Defenders should add moonshot-lead.com to network‑level deny lists, monitor its associated IP range (216.198.79.0/24) for any residual traffic, and consider applying domain‑based filtering for Vercel‑hosted endpoints that exhibit similar brand‑impersonation cues. Continuous observation of the registrar’s activity and any re‑registration attempts is advised, as threat actors often recycle infrastructure after takedown.