xn--moonsots-dib[.]app

The domain xn--moonsots-dib.app poses a specific threat as a brand impersonation phishing site targeting users of the Moonshot platform. With a page title reading "Vote to List — Powered by Moonshot," the site was likely designed to trick visitors into entering sensitive information, such as login credentials or wallet details, under the guise of a legitimate Moonshot voting or listing interface. This type of attack can lead to account takeover, financial loss, or compromise of cryptocurrency assets.

Evidence gathered by PhishDestroy reveals alarming indicators. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar often associated with malicious domains. It resolves to IP address 188.114.97.3 and currently remains offline. VirusTotal analysis shows that 5 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The SSL certificate was issued by Let's Encrypt (E7), which is common for both legitimate and fraudulent sites, adding a veneer of legitimacy.

Users who visited this domain should immediately change any passwords or credentials entered on the site, enable two-factor authentication on their Moonshot accounts, and monitor their accounts for unauthorized activity. PhishDestroy recommends running a full security scan with updated antivirus software and contacting Moonshot support if any assets were compromised. Always verify URLs before entering sensitive information, and rely on official channels for platform interactions.