asteroidshiba-allocation[.]com

This domain, asteroidshiba-allocation.com, is classified as a high-risk brand impersonation phishing site. Analysis indicates it specifically targets users of the Moonshot platform by mimicking legitimate allocation or voting pages, as evidenced by the page title 'Vote to List — Powered by Moonshot.' The threat type involves fraudulent credential harvesting or token theft under the guise of a trusted brand, a tactic commonly employed to exploit user trust in decentralized platforms.

Infrastructure analysis reveals multiple indicators of malicious activity. The domain resolves to the IP address 188.114.97.3 and was registered on April 20, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It is flagged by 16 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds. Detected technologies include Unpkg, Cloudflare Browser Insights, Cloudflare, and HTTP/3, while the SSL certificate is issued by Google Trust Services. The domain has since been taken offline, though its prior operational status poses residual risks to users who may have interacted with it.

Mitigation measures for this threat type include immediate domain blacklisting across enterprise and consumer security tools. Organizations should monitor for unauthorized access attempts linked to this domain or its associated IP address. Users who engaged with the site are advised to revoke any connected wallet permissions, reset credentials, and audit transaction histories for anomalous activity. Security teams should prioritize awareness campaigns highlighting the risks of brand impersonation in decentralized ecosystems, particularly those involving fake voting or allocation pages.