moonshot-vote[.]net

The domain moonshot-vote.net is currently active and returns HTTP 521, indicating the origin server is down. The site is secured with a certificate issued by Google Trust Services under the WE1 identifier and is front‑ended by Cloudflare, using HTTP/3. DNS resolution points to 104.21.9.89, an address owned by AS13335 Cloudflare, Inc., located in the United States. Registration data shows the domain was created on 21 February 2026 through Tucows Domains Inc., and the authoritative nameservers are dean.ns.cloudflare.com and priscilla.ns.cloudflare.com. Threat intelligence flags the domain as a crypto‑scam that impersonates the brand Moonshot. VirusTotal analysis shows three of ninety‑three scanners flag the domain as malicious. Independent blocklists PhishDestroy and ScamSniffer have listed the domain, and Gridinsoft assigns a trust score of 0 out of 100. The limited visibility caused by the 521 response prevents confirmation of the exact payload or page content, but the combination of brand impersonation, low trust score, and multiple blocklist entries establishes a high‑risk profile. Defenders should block the domain at network perimeters, add the associated IP address to deny lists, and monitor for additional domains registered with similar naming patterns or using the same Cloudflare nameservers. Continuous re‑scanning is recommended to capture any changes in the site’s availability or malicious behavior.