# moonshots-voting.xyz — MALICIOUS

> Moonshots-voting.xyz shows phishing potential despite no current detections. Stay alert and avoid this domain while investigations continue.

## Summary
PhishDestroy identifies moonshots-voting.xyz as a potentially deceptive domain linked to generic phishing activities. Although the domain currently shows no detections in major security scans, its suspicious registration and recent creation prompt caution.

This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 172.67.157.240. Created on March 6, 2026, it remains under investigation with no VirusTotal flags yet, but its infrastructure aligns with typical phishing setups.

The domain status is active, and PhishDestroy recommends avoiding engagement with moonshots-voting.xyz until further clarity emerges. Users should remain vigilant and report any related suspicious activity to help advance ongoing research.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Vote to List — Powered by Moonshot

## Domain Intelligence
- Registered: 2026-03-07 03:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.157.240
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["magdalena.ns.cloudflare.com", "martin.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "SOCRadar", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/yn3CkWgx/858c9cd43b01.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d4c2d9e8-626b-44ea-b575-bbdca710eeba
- Wayback Machine: https://web.archive.org/web/https://moonshots-voting.xyz
- PhishDestroy: https://phishdestroy.io/domain/moonshots-voting.xyz/
- LLM endpoint: https://phishdestroy.io/domain/moonshots-voting.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonshots-voting.xyz/
Last updated: 2026-03-19