voter-moonshot[.]xyz

www.voter-moonshot.xyz is a brand impersonation domain specifically designed to mimic the legitimate Moonshot platform. This domain, currently offline, posed as a voting portal under the title "Vote to List — Powered by Moonshot," aiming to deceive users into believing they were interacting with an official Moonshot service. The threat type is brand impersonation, which often serves as a precursor to credential theft or crypto drainer activities, though the exact payload has not been confirmed due to its takedown.

The domain was registered on March 05, 2026, through Name.com, Inc., and resolved to IP address 216.150.16.129. Security analysis from VirusTotal reveals that 9 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. Notably, the domain lacked an SSL certificate, increasing the risk of data interception for any visitor who may have accessed it while it was active. These technical indicators, combined with the brand impersonation of Moonshot, underscore the domain's malicious intent.

Currently, the domain is offline and has been taken down, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with this domain monitor their accounts for suspicious activity and change passwords if any credentials were entered. Always verify URLs directly through official channels before engaging with platforms claiming to be Moonshot. This incident highlights the importance of using security tools and staying informed about emerging threats targeting cryptocurrency and blockchain-related services.