# moonshot.vote-portal.app — MALICIOUS

> moonshot.vote-portal.app was a phishing site flagged by multiple blocklists. Avoid this domain to protect your personal data and credentials.

## Summary
PhishDestroy identifies moonshot.vote-portal.app as a medium-risk phishing domain that posed a threat to users by attempting to steal sensitive information. Phishing sites like this mimic legitimate services to deceive visitors and capture data such as login credentials, personal details, or financial information.

This particular phishing campaign directed users to a fraudulent portal designed to imitate a voting or registration site. Visitors were likely tricked into entering confidential information, which could then be exploited by malicious actors. The domain was registered recently and appeared on two security blocklists, with some antivirus vendors flagging it as suspicious.

Since moonshot.vote-portal.app is currently offline, users who visited the site should immediately change any passwords or credentials they might have entered. It is also recommended to monitor accounts for unusual activity and consider enabling multi-factor authentication where available. Staying vigilant and verifying URLs before submitting information helps prevent falling victim to such scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dean.ns.cloudflare.com", "priscilla.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["CRDF", "CyRadar", "ESET", "Fortinet", "Gridinsoft", "Seclookup", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019be7f1-9377-7712-ae04-810668e2db2e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b3ec9e14-7c2d-4d35-bc7d-0ff41ad54187
- PhishDestroy: https://phishdestroy.io/domain/moonshot.vote-portal.app/
- LLM endpoint: https://phishdestroy.io/domain/moonshot.vote-portal.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshot.vote-portal.app/
Last updated: 2026-03-19