xn--moonshos-uxb[.]net

PhishDestroy has identified xn--moonshos-uxb.net as an elevated risk domain engaged in brand impersonation, specifically targeting the Moonshot platform. This domain is currently offline, but its recent activity posed a significant threat to users who may have been tricked into interacting with a fraudulent voting interface. The page title 'Vote to List — Powered by Moonshot' was designed to deceive visitors into believing they were on an official Moonshot site.

Technical analysis reveals that the domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to IP address 172.67.159.211. It appears on one security blocklist and has a VirusTotal detection rate of 8 out of 95 security vendors flagging it as malicious. The SSL certificate was issued by Let's Encrypt (E8), which is commonly abused by phishers due to its free availability. The unique seed 626f56 was used to generate this report, ensuring traceability.

To mitigate the risk of Moonshot brand impersonation, users should always verify the URL before entering credentials or voting on any platform. PhishDestroy recommends that Moonshot users enable two-factor authentication and report any suspicious domains to the official support team. Additionally, organizations should monitor for lookalike domains using internationalized domain names (IDN) like this one, which uses a punycode prefix to disguise the true domain name.