xn--mooshot-5jb[.]com

This domain is flagged for elevated risk due to brand impersonation targeting Moonshot, a recognized entity in the cryptocurrency or technology sector. The site mimics Moonshot’s branding, presenting itself as a voting platform under the page title 'Vote to List — Powered by Moonshot.' Such impersonation is commonly used to deceive users into disclosing sensitive information or engaging in fraudulent activities under the guise of legitimacy. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 104.21.41.152 and employs Cloudflare alongside HTTP/3 for content delivery. The SSL certificate is issued by Let’s Encrypt, a common but non-exclusive indicator of legitimacy. VirusTotal reports 4 out of 95 security vendors flagging this domain as malicious, while it appears on one security blocklist. The domain is currently offline, though its infrastructure and registration details remain suspicious. Mitigation steps for this type of threat include blocking the domain and its associated IP (104.21.41.152) at the network level. Organizations should monitor for similar impersonation attempts, particularly those leveraging homograph domains (e.g., Punycode xn-- variants) to mimic legitimate brands. End-users should verify the authenticity of any voting or engagement platforms directly through official Moonshot channels before interacting with them. Security teams are advised to review logs for connections to the domain or IP to identify potential prior exposure.