moonshots-voting[.]top
“Vote to List — Powered by Moonshot”
Riepilogo delle prove
This domain is flagged as a high-risk brand impersonation threat targeting Moonshot, a recognized entity in the cryptocurrency or decentralized application space. Analysis indicates the domain was designed to deceive users by mimicking legitimate voting or listing processes under the guise of Moonshot’s branding, as evidenced by the page title 'Vote to List — Powered by Moonshot.' The intent appears to be credential harvesting, unauthorized transaction solicitation, or distribution of malicious payloads under false pretenses.
Infrastructure analysis reveals the domain was registered on June 14, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.25.108, a Cloudflare-protected endpoint leveraging HTTP/3, Node.js, Vue.js, and Nuxt.js for frontend rendering. The domain has been detected by 18 out of 95 security vendors on VirusTotal and appears on three independent security blocklists. Additional detections include automated blocking by browser-based transaction security tools and a Gridinsoft trust score of 0/100, indicating no baseline legitimacy. The domain is currently offline, though historical activity suggests it may have been operational during a targeted campaign.
Mitigation steps for this specific threat type include immediate blacklisting of the domain and its resolving IP across all network security controls, including firewalls, DNS filters, and endpoint protection systems. Organizations should monitor for residual phishing attempts referencing 'Vote to List' or Moonshot branding in email, social engineering, or decentralized application contexts. Security teams are advised to review logs for connections to 104.21.25.108 or related Cloudflare IP ranges during the domain’s active period. User awareness training should emphasize the risks of interacting with unsolicited voting or listing prompts, particularly those leveraging cryptocurrency or token-based incentives. If credentials or wallet interactions were exposed, affected parties should revoke access, rotate keys, and audit transaction histories for unauthorized activity.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260617-020F08- Titolo della pagina acquisita
- Vote to List — Powered by Moonshot
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | moonshots-voting.top |
malicious | Sinkholed |
| OpenDNS | moonshots-voting.top |
phishing | Phishing Block |
| Hagezi Threat Feed | moonshots-voting.top |
malicious | Sinkholed |
| DNS4EU | moonshots-voting.top |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
17 → 18
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
6 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of moonshots-voting.top · checked Jun 25, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo