moonshot-voting-75ytw6[.]netlify[.]app

This domain is flagged as a high-risk brand impersonation site targeting Moonshot, a recognized entity in the cryptocurrency or technology sector. The site is designed to deceive visitors into believing they are interacting with an official Moonshot platform, likely to harvest credentials, personal data, or distribute malicious payloads. Such impersonation attacks often exploit brand trust to bypass user vigilance, making them particularly effective and dangerous for unsuspecting targets. Analysis indicates the domain is hosted on Netlify infrastructure and resolves to IP address 35.157.26.135, located in Germany under AS16509 (Amazon.com, Inc.). It currently holds a valid SSL certificate issued by DigiCert Inc, which may lend a false sense of legitimacy to visitors. The domain appears on three security blocklists and is flagged by 10 out of 95 security vendors on VirusTotal, confirming its malicious classification. No legitimate creation date or registration details are publicly available, further suggesting its fraudulent nature. If you have visited moonshot-voting-75ytw6.netlify.app, immediate action is required. Disconnect the device from the network to prevent potential data exfiltration or lateral movement. Clear all browser data, including cookies and cached files, to remove any stored session tokens. Run a full system scan using updated security tools to detect and remove any malware or backdoors. Change passwords for any accounts accessed while the site was open, prioritizing credentials linked to financial or sensitive services. Monitor accounts for unauthorized activity and enable multi-factor authentication where possible to mitigate future risks.