moonshot-voting-uun[.]netlify[.]app

The domain moonshot-voting-uun.netlify.app has been identified as posing a brand impersonation threat, specifically targeting the Moonshot brand. This site purports to be associated with Moonshot through its page title, "Vote to List — Powered by Moonshot," misleading users into believing it is an official platform. This type of brand impersonation can lead to unauthorized access to personal information, financial loss, and the erosion of trust in legitimate services.

Several indicators highlight the potential risk associated with this domain. It resolves to the IP address 54.253.94.210, located in Australia and owned by AS16509 Amazon.com, Inc. The site is registered through Netlify and uses an SSL certificate issued by DigiCert Inc. Despite these legitimate-looking credentials, the domain is actively listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Interestingly, a scan on VirusTotal shows 0 out of 95 detections, indicating that it has not yet been flagged by many security engines, which could suggest it is relatively new or evolving to avoid detection.

Users who have visited the domain should immediately review their accounts for any unauthorized access or transactions. It is critical to change passwords and enable two-factor authentication for added security. Avoid entering any personal or sensitive information on the site, and consider reporting the domain to cybersecurity authorities for further action. Staying informed and vigilant is crucial to protecting against such brand impersonation threats.