moonshootvote[.]rest

This domain, moonshootvote.rest, presents a high-risk brand impersonation threat targeting users of the Moonshot cryptocurrency platform. Analysis indicates the site mimics a legitimate vote-to-list campaign, likely designed to harvest user credentials, private keys, or authorize fraudulent transactions under the guise of community voting. The page title, 'KOL – Vote to list on Moonshot,' directly references Moonshot’s branding, creating a false sense of legitimacy to deceive users into engaging with malicious infrastructure. Infrastructure analysis reveals multiple red flags supporting the fraudulent nature of this domain. The domain was registered on June 12, 2026, through Global Domain Group LLC, and resolves to the IP address 172.67.175.164. It is flagged by 16 out of 95 security vendors on VirusTotal, and appears on four distinct security blocklists, including MetaMask and SEAL. The SSL certificate, issued by Google Trust Services, provides encryption but does not validate the site’s legitimacy, as fraudulent domains frequently leverage trusted certificate authorities to appear secure. Users who visited moonshootvote.rest should take immediate action to mitigate potential compromise. Disconnect any active wallet connections associated with the site and revoke permissions for suspicious smart contracts. Monitor accounts for unauthorized transactions and rotate credentials for any platforms accessed while the domain was active. If cryptocurrency was transferred or sensitive data disclosed, report the incident to relevant security teams and consider freezing affected assets. Due to the domain’s current offline status, further interaction is unlikely, but vigilance is advised for similar impersonation attempts targeting Moonshot or related services.