moonshot-listing-yys[.]netlify[.]app

This domain operates as a fraudulent voting platform under the guise of Moonshot, a known cryptocurrency project. The site displays the page title 'Vote to List — Powered by Moonshot' to deceive visitors into believing it is an official Moonshot service. The intent is to harvest user credentials, wallet details, or other sensitive information by exploiting trust in the Moonshot brand. Victims may be prompted to connect wallets, enter private keys, or authorize transactions under false pretenses, leading to unauthorized access or asset theft. Analysis indicates the domain is hosted on Netlify infrastructure and resolves to the IP address 63.176.8.218, located in Germany under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by DigiCert Inc, a legitimate provider, which does not mitigate the malicious nature of the domain. As of the latest scan, 11 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on three independent security blocklists, including PhishDestroy and MetaMask. The domain remains active, increasing the risk of exposure to unsuspecting users. If you have visited moonshot-listing-yys.netlify.app, immediately disconnect any connected wallets or devices from the internet. Revoke any suspicious token approvals or smart contract interactions using a trusted blockchain explorer. Change passwords for any accounts accessed during the visit, and enable multi-factor authentication where available. Monitor connected wallets for unauthorized transactions and report any anomalies to the relevant platform. Users should also clear browser cache and cookies to remove any residual tracking elements. For further verification, cross-reference the domain against known blocklists or threat intelligence feeds to confirm its malicious status.