moonshot-voting-su07cq[.]netlify[.]app
“Vote to List — Powered by Moonshot”
moonshot-voting-su07cq.netlify.app — Konten tidak tersedia. Peniruan identitas merek: Moonshot; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 10/91 (alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 80/100. Registrar: Netlify.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, moonshot-voting-su07cq.netlify.app, is confirmed as a high-risk brand impersonation phishing site targeting Moonshot. Analysis indicates the threat actor designed the page to mimic legitimate voting campaigns under the Moonshot brand, with the page title explicitly stating 'Vote to List — Powered by Moonshot.' No direct crypto drainer kit signatures were observed, but the fraudulent branding and deceptive call-to-action elements align with credential harvesting or social engineering tactics. Infrastructure analysis reveals the domain is hosted on Netlify infrastructure and resolves to the IPv6 address 2a05:d014:58f:6200::258, geolocated in Germany under Amazon.com, Inc. (AS16509). The SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1). As of the latest scan, VirusTotal reports 10 out of 95 security vendors flagging the domain as malicious. The domain appears on three independent security blocklists and is actively blocked by at least three major threat intelligence feeds. No Google Safe Browsing (GSB) classification was provided in the available data. The domain remains active despite detection by multiple security mechanisms. Response actions by hosting providers or registrars have not yet resulted in takedown, and the SSL certificate remains valid. The remaining risk is elevated due to the domain's persistence, brand impersonation tactics, and low detection rate relative to vendor coverage. Organizations are advised to block the domain at the DNS or proxy level, monitor for related subdomains, and alert users to the fraudulent Moonshot branding. Continuous monitoring of Netlify-hosted subdomains with similar naming patterns is recommended to preempt further abuse.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 2 identified
Netlify providers hosting and server-less backend services for web applications and static websites.
www.netlify.com Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive