moonshot-votes[.]net

The domain moonshot-votes.net has been identified as a brand impersonation phishing threat targeting Moonshot. It is currently offline, but during its active period it posed as a legitimate Moonshot voting platform to deceive users. The threat type is brand impersonation, where attackers mimic a trusted brand to steal credentials or sensitive information.

Technical indicators reveal that the domain was created on January 6, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolved to IP address 104.21.3.30 and held an SSL certificate issued by WE1. VirusTotal flagged this domain with 2 out of 95 security vendors marking it as malicious, and it appeared on 4 security blocklists. The page title was "Vote to List — Powered by Moonshot," further reinforcing the impersonation.

The domain is now offline, reducing immediate risk, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with emails or links referencing moonshot-votes.net. If users have already visited the site, they should change their Moonshot credentials immediately and monitor for account compromise. Always verify URLs directly with official brand websites before entering sensitive information.