xn--moonshts-6sb[.]app

This domain, xn--moonshts-6sb.app, poses as an official Moonshot voting platform under the title 'Vote to List — Powered by Moonshot.' The site is designed to deceive users into submitting sensitive information, such as login credentials or personal data, by mimicking a legitimate brand interaction. The fraudulent nature of the page is reinforced by its use of a punycode domain (xn--moonshts-6sb.app), which visually resembles the authentic Moonshot brand but employs non-ASCII characters to evade detection by casual observers. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and is hosted on Cloudflare infrastructure at IP address 172.67.184.219. The SSL certificate, issued by Let's Encrypt (serial number E7), provides a false sense of security while the domain is flagged by 10 out of 95 security vendors on VirusTotal. The page title, 'Vote to List — Powered by Moonshot,' directly impersonates the brand, and the domain appears on at least one security blocklist, further confirming its malicious intent. If a user visited this domain or interacted with its content, immediate action is required. First, revoke any credentials or personal information submitted to the site, as they are likely compromised. Second, scan the device used to access the domain for malware or unauthorized access, particularly if files were downloaded or forms were completed. Finally, monitor accounts associated with the submitted data for suspicious activity, such as unauthorized logins or transactions. Users should also report the domain to their organization's security team or a trusted threat intelligence platform to aid in broader mitigation efforts.