moonshotvote-p4[.]netlify[.]app

This domain, moonshotvote-p4.netlify.app, is currently under investigation for brand impersonation targeting Moonshot, a recognized entity in the cryptocurrency or technology sector. The threat type is classified as brand_impersonation, where adversaries mimic legitimate services to deceive users into disclosing sensitive information or performing unintended actions. Analysis indicates no direct association with known crypto drainer kits at this stage, though the impersonation tactic aligns with broader phishing objectives. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 35.157.26.135, hosted through Netlify, a platform-as-a-service provider. As of the latest assessment, the domain has not been flagged by any of the 95 security engines on VirusTotal, yielding a detection score of 0/95. The SSL certificate is issued by DigiCert Inc, a common certificate authority, which does not inherently indicate malicious intent but is frequently leveraged in phishing campaigns to appear legitimate. No creation date is publicly available for this subdomain, as it is dynamically generated under Netlify’s infrastructure. Google Safe Browsing (GSB) currently does not list the domain, and no blocklist entries have been recorded in major threat intelligence feeds. The domain remains active, with no takedown or mitigation efforts observed at this time. Given the absence of detections in VirusTotal and blocklists, the campaign may still be in its early stages or employing evasion techniques to avoid detection. Users are advised to treat this domain with extreme caution, particularly if encountered in unsolicited communications or advertisements. Organizations targeted by this impersonation should monitor for credential harvesting attempts, unauthorized transactions, or further social engineering tactics. Proactive measures, such as domain monitoring and user education on recognizing brand impersonation, are recommended to mitigate potential risks associated with this campaign.