moonshots-picking[.]pages[.]dev

This domain, moonshots-picking.pages.dev, is flagged as a high-risk brand impersonation threat targeting Moonshot. Analysis indicates the site mimics legitimate Moonshot branding, presenting a page titled 'Vote to List — Powered by Moonshot' to deceive users into engaging with fraudulent content. The domain appears designed to exploit trust in the Moonshot brand, potentially for credential harvesting or other malicious activities. Infrastructure analysis reveals the following technical indicators: the domain is detected by 12 out of 95 security vendors on VirusTotal, indicating widespread recognition as malicious. It was registered on February 27, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The domain is currently listed on one security blocklist and utilizes a Let's Encrypt SSL certificate (serial number E7). No Google Safe Browsing (GSB) status is provided, but its presence on PhishDestroy’s blocklist confirms its malicious classification. As of the latest assessment, moonshots-picking.pages.dev remains active, posing an ongoing risk to users. Immediate response actions include blocking the domain at the network level and alerting affected stakeholders to prevent further exploitation. Despite its detection by multiple security vendors, the domain’s continued operation underscores the need for vigilance, particularly in environments where Moonshot-related services are utilized. Organizations are advised to monitor for related indicators and implement strict access controls to mitigate potential exposure.