moonshot-voting-oswz0j[.]netlify[.]app

moonshot-voting-oswz0j.netlify.app is a newly detected phishing domain that impersonates the Moonshot brand. The site, titled 'Moonshot – Vote your token to get listed!', aims to deceive users into participating in a fake token voting scheme. Despite its recent detection, it has already been flagged by three public blocklists, including PhishDestroy, MetaMask, and SEAL.

The domain is hosted on Netlify, with its IP address registered to Amazon's infrastructure in Germany. It uses a DigiCert SSL certificate, which may lend an appearance of legitimacy to unsuspecting visitors. However, the site's true intent is malicious, seeking to exploit users' trust in the Moonshot brand.

Currently, the domain has zero detections on VirusTotal, indicating its freshness and the potential for it to evade traditional antivirus databases temporarily. This underscores the importance of early detection systems like PhishDestroy, which can identify and mitigate threats before they become widespread. The gap between domain registration and antivirus database updates can be exploited by attackers, making rapid detection crucial.

PhishDestroy's early identification of moonshot-voting-oswz0j.netlify.app highlights the ongoing need for vigilance against phishing attempts. By monitoring new domains and their activities, threat intelligence platforms can provide crucial defenses against emerging scams. As this domain remains active, it is vital to remain aware of such threats and take appropriate measures to protect users and systems from potential harm.