# votes-moonwell.foundation — SUSPICIOUS

> votes-moonwell.foundation is linked to credential theft with 0/95 VT detections. Stay cautious and verify before sharing sensitive data.

## Summary
The domain votes-moonwell.foundation has been identified as a potential threat related to credential theft. While no specific brand impersonation or known crypto drainer kit has been confirmed, the domain’s usage suggests attempts to harvest credentials, likely targeting users under the guise of a legitimate foundation or voting platform.

Technical examination reveals that votes-moonwell.foundation currently holds a VirusTotal score of 0/95, indicating no detections so far. It was registered on March 31, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain uses a Let's Encrypt SSL certificate and resolves to IP address 188.114.97.3. There is no evidence it is on Google Safe Browsing blacklists, nor is it listed on other common blocklists, suggesting it is still under investigation.

Although votes-moonwell.foundation is not yet flagged by major threat databases, its classification as credential theft means users should exercise caution. Security teams are advised to monitor network traffic for connections to this domain and inform users to avoid entering sensitive information on this site. The risk remains moderate until further intelligence confirms malicious activity or dismisses the threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-31 13:38:04
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/acfcffec-4eda-47e3-aa50-3b19ead62674
- PhishDestroy: https://phishdestroy.io/domain/votes-moonwell.foundation/
- LLM endpoint: https://phishdestroy.io/domain/votes-moonwell.foundation/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/votes-moonwell.foundation/
Last updated: 2026-03-31