moonshot-voting-kc[.]netlify[.]app

Analysis of the domain moonshot-voting-kc.netlify.app indicates active phishing infrastructure as of August 3, 2026. The domain is hosted on Netlify's platform, a common environment for rapid deployment of malicious pages due to its ease of use and free tier. It appears on one security blocklist, suggesting prior detection by at least one vendor, though the specific blocklist source is not disclosed. PhishDestroy has flagged this domain, providing an initial indicator of malicious intent.

No detections were recorded by the 91 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety and may reflect a lack of recent analysis or evasion techniques. The domain's content and exact phishing target remain unconfirmed, as no page title, brand impersonation, or scam type has been identified in available intelligence. Infrastructure analysis reveals the domain is part of Netlify's app subdomain structure, which is frequently exploited for short-lived phishing campaigns. No registrar, ASN, or geolocation details are currently available, limiting attribution efforts.

Defenders should treat this domain as high-risk until further analysis confirms its purpose or takedown. Network-level blocking is recommended, particularly for organizations with exposure to voting, electoral, or related sectors, given the domain's suggestive naming convention. Additional monitoring of Netlify-hosted subdomains with similar patterns is advised.