vote[.]moonsshoot[.]net

The domain vote.moonsshoot.net is identified as a generic phishing threat. It is currently active and does not impersonate any specific brand, nor does it use a drainer kit. The site poses an elevated risk level, making it potentially unsafe for users. This domain is likely to be involved in phishing activities, and caution is advised when interacting with it.

Several technical indicators highlight the risks associated with vote.moonsshoot.net. VirusTotal reports that 4 out of 95 security vendors, including alphaMountain.ai, Fortinet, and Gridinsoft, have detected this domain as a threat. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolves to the IP address 172.67.189.53. It appears on two security blocklists, specifically PhishDestroy and ScamSniffer. The SSL certificate is issued by Google Trust Services / WE1, and the page title indicates it is a suspected phishing site. The domain's HTTP status is 403, and it uses Cloudflare technologies with nameservers dean.ns.cloudflare.com and priscilla.ns.cloudflare.com.

To protect themselves, users who suspect they have interacted with vote.moonsshoot.net should immediately change their passwords and enable two-factor authentication on affected accounts. It is also crucial to monitor for any unauthorized transactions or signs of fraud. Users can report phishing attempts to security organizations or use online platforms that track phishing domains. Taking these steps can help mitigate the risks associated with phishing scams.