moonshots-voting[.]top
“Vote to List — Powered by Moonshot”
Résumé des preuves
This domain is flagged as a high-risk brand impersonation threat targeting Moonshot, a recognized entity in the cryptocurrency or decentralized application space. Analysis indicates the domain was designed to deceive users by mimicking legitimate voting or listing processes under the guise of Moonshot’s branding, as evidenced by the page title 'Vote to List — Powered by Moonshot.' The intent appears to be credential harvesting, unauthorized transaction solicitation, or distribution of malicious payloads under false pretenses.
Infrastructure analysis reveals the domain was registered on June 14, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.25.108, a Cloudflare-protected endpoint leveraging HTTP/3, Node.js, Vue.js, and Nuxt.js for frontend rendering. The domain has been detected by 18 out of 95 security vendors on VirusTotal and appears on three independent security blocklists. Additional detections include automated blocking by browser-based transaction security tools and a Gridinsoft trust score of 0/100, indicating no baseline legitimacy. The domain is currently offline, though historical activity suggests it may have been operational during a targeted campaign.
Mitigation steps for this specific threat type include immediate blacklisting of the domain and its resolving IP across all network security controls, including firewalls, DNS filters, and endpoint protection systems. Organizations should monitor for residual phishing attempts referencing 'Vote to List' or Moonshot branding in email, social engineering, or decentralized application contexts. Security teams are advised to review logs for connections to 104.21.25.108 or related Cloudflare IP ranges during the domain’s active period. User awareness training should emphasize the risks of interacting with unsolicited voting or listing prompts, particularly those leveraging cryptocurrency or token-based incentives. If credentials or wallet interactions were exposed, affected parties should revoke access, rotate keys, and audit transaction histories for unauthorized activity.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260617-020F08- Titre de la page capturée
- Vote to List — Powered by Moonshot
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | moonshots-voting.top |
malicious | Sinkholed |
| OpenDNS | moonshots-voting.top |
phishing | Phishing Block |
| Hagezi Threat Feed | moonshots-voting.top |
malicious | Sinkholed |
| DNS4EU | moonshots-voting.top |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
17 → 18
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
6 technologies identifiées avec une forte confiance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of moonshots-voting.top · checked Jun 25, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif