vote[.]moonshot-ape[.]app

The domain vote.moonshot-ape.app has been assessed as elevated risk due to its active brand impersonation of Moonshot. This specific threat type involves mimicking a legitimate brand to deceive users into connecting wallets or providing credentials, potentially enabling crypto drainer activity. The page title 'Vote to List — Powered by Moonshot' further reinforces the fraudulent narrative.

Technical indicators paint a concerning picture. VirusTotal reports 5 out of 95 security vendors flagging this domain, and it already appears on 2 security blocklists. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolves to IP address 172.67.196.161. While the SSL certificate is issued by Google Trust Services (WE1), which provides encryption, it does not validate the domain's legitimacy. These data points collectively suggest a coordinated effort to establish credibility while evading detection.

To mitigate risk, users should avoid interacting with this domain entirely. For those who may have already visited, immediate actions include disconnecting any linked wallets and rotating passwords. Organizations should add the domain to blocklists and monitor for similar variations. PhishDestroy recommends reporting the domain to hosting providers and security vendors to expedite takedown, and advising users to always verify URLs through official channels before engaging with voting or token listing platforms.