moonshotvoting[.]top

The domain moonshotvoting.top has been identified as a brand impersonation threat specifically targeting the Moonshot platform. Analysis confirms the domain hosted a deceptive page titled 'Moonshot Vote,' designed to mimic legitimate Moonshot services. As of the latest assessment, the domain has been taken offline, though prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on December 13, 2025, and resolved to the IP address 188.114.96.3. Detection metrics indicate the domain was flagged by 10 of 95 security vendors on VirusTotal, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist and employed technologies including Node.js, Vue.js, Nuxt.js, and Cloudflare services, suggesting a structured deployment for malicious purposes. Current status confirms the domain is offline, though residual risk remains for users who may have interacted with the page prior to takedown. Organizations and individuals are advised to verify domain authenticity before engaging with any Moonshot-related communications, particularly those soliciting votes or user input. Monitoring for similar domains registered under the same registrar or resolving to the identified IP may aid in preempting further threats. Users should report any suspicious activity to relevant security teams for further investigation.