moonshotvoting[.]net

This domain is identified as an active brand impersonation threat targeting users of Moonshot, a recognized platform. The site is designed to deceive visitors into believing they are interacting with legitimate Moonshot services, likely to harvest credentials, sensitive information, or deploy malicious payloads. The fraudulent nature of the domain is reinforced by its recent creation and association with known phishing infrastructure, posing a significant risk to unsuspecting users. Analysis indicates the domain was registered on June 16, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently observed in phishing campaigns. As of the latest assessment, 5 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The site resolves to the IP address 172.67.195.26 and is currently active, appearing on three distinct security blocklists. The SSL certificate, issued by Google Trust Services, does not mitigate the threat, as fraudulent sites commonly use valid certificates to appear legitimate. Users who have visited moonshotvoting.net should take immediate action to mitigate potential risks. Disconnect from the site if still connected and avoid entering any credentials or personal information. Run a full security scan on the device used to access the domain to detect any malware or unauthorized access. Monitor accounts associated with Moonshot for suspicious activity, such as unauthorized logins or transactions. If credentials were entered, change passwords immediately and enable multi-factor authentication where available. Report the domain to relevant security teams or platforms to aid in broader threat mitigation efforts.