moonshot-voting-f4w[.]netlify[.]app

The domain moonshot-voting-f4w.netlify.app is suspected of being a fake login site, a specific form of generic phishing. The domain is currently active and has not yet been flagged by any of the 95 vendors on VirusTotal. However, it appears on three security blocklists, indicating a potential risk.

Infrastructure analysis reveals that moonshot-voting-f4w.netlify.app is registered through Netlify and resolves to the IP address 63.176.8.218, which is located in Germany and is part of the AS16509 network operated by Amazon.com, Inc. The domain has been flagged by 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Despite the lack of detections on VirusTotal, the presence on multiple blocklists and the nature of the threat suggest a high risk level.

Given the current status of the domain as active and the high risk level, it is recommended that users avoid interacting with moonshot-voting-f4w.netlify.app. Security teams should consider blocking this domain at the network level to prevent potential phishing attacks. Regular monitoring of the domain's activity and updates to blocklists should be conducted to ensure ongoing protection.