ranked-moonshot[.]com
ranked-moonshot.com 网络钓鱼与安全检查
“Vote to List — Powered by Moonshot”
ranked-moonshot.com — 内容不可用 (HTTP 502). 品牌冒充:Moonshot; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 1/93 (SOCRadar); URLQuery 1 alert; URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. 注册商: Hello Internet.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain ranked-moonshot.com was created on February 27, 2026 and registered through Hello Internet Corp. It resolves to the IP address 104.21.86.39, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The domain uses Cloudflare’s authoritative nameservers aarav.ns.cloudflare.com and jill.ns.cloudflare.com. No SSL certificate is presented for the site, indicating that HTTPS is not enforced. The page title returned from the live site was "Vote to List — Powered by Moonshot," and the domain is explicitly listed as impersonating the Moonshot brand.
The activity has been classified as a crypto scam under the broader category of brand impersonation. Security telemetry shows the domain appears on three blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis recorded a single detection out of 93 scanning engines, confirming at least one vendor flagged the domain as malicious. The current operational status is offline, so no live content can be inspected beyond the recorded title.
Uncertainty remains regarding the specific payload or monetary mechanisms employed, as no additional page content or malware samples have been published. Defenders should add ranked-moonshot.com to network and endpoint blocklists, monitor DNS queries for the associated Cloudflare IP range, and enforce TLS inspection where possible to detect any future re‑hosting attempts. Continuous watch on the registrar Hello Internet Corp and the Cloudflare nameservers is advisable, as the infrastructure could be reused for other impersonation campaigns targeting Moonshot or similar brands.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | ipfs.io |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告
PD-20260227-A4E930 Recipient: abuse@hello.co 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。