moonshots-lists[.]com

Analysis of the domain moonshots-lists.com indicates active brand impersonation targeting Moonshot, classified as a high-risk threat. The domain was registered on June 9, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and remains operational as of July 12, 2026. Infrastructure analysis reveals it resolves to the IP address 104.21.74.114, located in Canada and associated with Cloudflare, Inc. The domain is served over HTTP/3 and protected by Cloudflare, with Cloudflare Browser Insights also detected. Current HTTP status returns a 403 Forbidden error, and the page title matches this response, suggesting either restricted access or a placeholder state. The domain appears on one security blocklist and is flagged by 10 of 91 security vendors on VirusTotal, confirming detection as malicious. It is explicitly blocked by PhishDestroy under the classification of brand impersonation. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently suspicious issuer. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. While the exact content of the site remains unanalyzed due to the 403 response, the available indicators—brand target, scam type, and detection by multiple security vendors—confirm its role in impersonating Moonshot. Defenders should treat this domain as hostile and implement blocking at the DNS or network level. Further monitoring is recommended to track any changes in HTTP status or content delivery, as the domain may transition from a restricted state to active phishing or fraudulent activity.