# moonshot-poll.net — MALICIOUS

> Warning: moonshot-poll.net is a high-risk phishing site posing as a voting platform. Avoid interaction; the domain is currently offline.

## Summary
PhishDestroy has identified moonshot-poll.net as a generic phishing domain masquerading under the guise of a voting-related service titled "Vote to List — Powered by Moonshot." The domain falls under the high-risk category due to its intent to deceive users and potentially harvest sensitive information.

Technical analysis reveals that moonshot-poll.net resolved to the IP address 172.67.146.252 and was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain was detected on four separate security blocklists and flagged by 10 out of 95 security vendors on VirusTotal, indicating a well-documented threat footprint.

Currently, moonshot-poll.net has been taken offline, reflecting proactive takedown actions likely in response to abuse reports and security monitoring. Although inaccessible now, its previous activity and detection status warrant caution. Users and administrators are advised to avoid any interaction with this domain and continue monitoring for similar threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Vote to List — Powered by Moonshot

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.146.252
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dean.ns.cloudflare.com", "priscilla.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["alphaMountain.ai", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bd8d4-5225-76df-b94d-9a7dddfb45c5.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bb08ecd3-e777-4b10-8314-ae8bbe0bec9f
- PhishDestroy: https://phishdestroy.io/domain/moonshot-poll.net/
- LLM endpoint: https://phishdestroy.io/domain/moonshot-poll.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot-poll.net/
Last updated: 2026-03-19