xn--moonshtt-osb[.]com

This report analyzes the domain xn--moonshtt-osb.com. The page title “moonshŏtt.com” indicates an attempt to impersonate the legitimate brand “moonshot.com” through a homograph attack, replacing a character with a Unicode variant. The site poses a threat as a potential phishing or brand impersonation domain designed to deceive users into providing credentials or downloading malware.

Technical evidence from VirusTotal shows 3 out of 95 security vendors flagged the domain as malicious, specifically Fortinet, Gridinsoft, and Seclookup. The domain is registered with NiceNIC International Group Co., Limited, and its IP address is 172.67.212.18 located in the United States, belonging to AS13335 Cloudflare, Inc. The domain was created on 2026-02-21 and uses an SSL certificate from Let’s Encrypt with fingerprint E8. The nameservers are dean.ns.cloudflare.com and priscilla.ns.cloudflare.com.

The domain is currently offline or down, indicating it may be inactive or taken down. The risk level is moderate due to the homograph attack technique and the presence of three vendor detections, but the offline status reduces immediate threat. Continued monitoring is recommended.