# www.voter-moonshot.xyz — MALICIOUS

> www.voter-moonshot.xyz is a suspicious phishing site. Do not enter personal info. Verify URLs carefully to stay safe online.

## Summary
PhishDestroy identifies www.voter-moonshot.xyz as an active phishing domain targeting users with generic social engineering tactics. This domain is designed to deceive visitors into divulging sensitive information, potentially compromising personal and financial data. The threat poses a medium risk level due to established patterns of phishing but with limited widespread detection among security vendors.

Technically, www.voter-moonshot.xyz was registered recently on March 04, 2026, via Name.com, Inc. It resolves to the IP address 216.150.16.129. VirusTotal analysis shows that 3 out of 95 security vendors have flagged this domain, indicating emerging but not yet universal recognition of the threat. The domain’s infrastructure and registration details suggest a relatively new campaign likely aiming to exploit voter-related themes for credibility and lure.

Currently, www.voter-moonshot.xyz remains active and accessible, highlighting the ongoing risk to unsuspecting users. PhishDestroy strongly advises users to avoid interacting with this domain, refrain from submitting any personal information, and verify all URLs before engagement. Security professionals should monitor this domain for further developments and consider adding it to phishing blocklists to prevent user exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Page title: Vote to List — Powered by Moonshot

## Domain Intelligence
- Registered: 2026-03-05 03:07:01
- Registrar: Name.com, Inc.
- Country: US
- IP: 216.150.16.129
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ns1.vercel-dns.com ns2.vercel-dns.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "SOCRadar", "Sophos", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbbdd-89a7-75ae-9489-587baff13a3e.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/www.voter-moonshot.xyz
- PhishDestroy: https://phishdestroy.io/domain/www.voter-moonshot.xyz/
- LLM endpoint: https://phishdestroy.io/domain/www.voter-moonshot.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.voter-moonshot.xyz/
Last updated: 2026-03-19