moonshot-voting-h8fnm4[.]netlify[.]app

moonshot-voting-h8fnm4.netlify.app is a phishing domain targeting users of the Moonshot platform. It attempts to deceive users into voting for their tokens to get listed, using a convincing page title, "Moonshot – Vote your token to get listed!". The site is hosted on an IP address associated with Amazon.com, Inc. in Germany and uses an SSL certificate issued by DigiCert Inc.

Despite having zero detections on VirusTotal, this domain is already listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This early detection highlights the domain's freshness rather than its safety. PhishDestroy's advanced detection capabilities allow it to identify threats in the crucial 24-72 hour window before they appear in antivirus databases.

The domain is registered through Netlify and has an abuse score of 19 out of 100, indicating a moderate level of malicious activity. The phishing operation exploits the trust in the Moonshot brand, potentially leading users to disclose sensitive information under the guise of participating in a legitimate token listing process. This underscores the importance of recognizing and avoiding such deceptive tactics.