moonshts-vote[.]pro

This domain, moonshts-vote.pro, is flagged as a high-risk phishing endpoint currently active as of July 12, 2026. Registered on March 2, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolves to IP address 188.114.97.3, which is associated with Cloudflare infrastructure. Analysis indicates the use of Cloudflare services, including HSTS and HTTP/3, alongside Cloudflare Browser Insights for performance monitoring. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Infrastructure analysis reveals the domain is listed on four security blocklists and appears in 23 threat intelligence pulses on AlienVault OTX, suggesting widespread detection by threat intelligence communities. Multiple security mechanisms, including SEAL, MetaMask, PhishDestroy, and BLP-Malware, currently block access to this domain. The page title 'Just a moment...' is consistent with Cloudflare's interstitial challenge page, often used to filter or obscure malicious content from automated scans. While the exact nature of the phishing content remains unconfirmed due to the lack of direct page analysis, the combination of Cloudflare-hosted infrastructure, recent registration, and broad blocklist presence supports the classification as an active phishing threat. Defenders should treat this domain as hostile and implement blocking or monitoring measures for any traffic attempting to resolve or interact with moonshts-vote.pro. Further investigation into associated IP ranges and certificate histories may reveal additional related infrastructure.