vote-moonshot[.]net

The domain vote-moonshot.net is currently flagged as an active brand impersonation threat targeting Moonshot, a recognized technology platform. Analysis indicates this domain is designed to deceive users by mimicking official Moonshot branding, as evidenced by its page title, 'Vote to List — Powered by Moonshot,' which closely resembles legitimate communications from the organization. The domain is categorized as a high-risk threat due to its confirmed impersonation tactics and ongoing operational status. Infrastructure analysis reveals that vote-moonshot.net was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with suspicious domains. The domain resolves to the IPv6 address 2606:4700:3035::ac43:b522, hosted on AS13335, an autonomous system operated by a major content delivery network provider in the United States. Detection metrics indicate that 11 of 95 security vendors on VirusTotal have flagged this domain as malicious, while it appears on four distinct security blocklists. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as it is commonly used across both legitimate and malicious domains. Additional protective measures, including blocking by multiple security frameworks, further corroborate its classification as a high-risk entity. Current assessments confirm that vote-moonshot.net remains an active threat, with no indications of takedown or remediation at the time of analysis. Organizations and users are advised to implement immediate countermeasures, including domain blocking at the network perimeter, endpoint protection updates to include this indicator of compromise, and heightened user awareness regarding brand impersonation tactics. Security teams should monitor for related infrastructure, such as subdomains or associated IP ranges, and report the domain to relevant threat intelligence platforms for broader community defense. Given the domain's recent registration and persistent malicious activity, continuous vigilance is recommended to mitigate potential exposure.