moonshots-lobby[.]pages[.]dev

This domain, moonshots-lobby.pages.dev, is actively engaged in brand impersonation targeting Moonshot, a recognized entity in the cryptocurrency or technology sector. The site presents itself as a legitimate voting or listing platform under the guise of "Vote to List — Powered by Moonshot," likely designed to harvest user credentials, propagate malicious payloads, or facilitate unauthorized transactions. The page title and branding elements closely resemble official Moonshot communications, increasing the likelihood of successful deception among users familiar with the legitimate brand. Analysis indicates the domain was registered on February 27, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted on Cloudflare’s infrastructure (AS13335). Security vendors on VirusTotal have flagged the domain at a ratio of 1/95, suggesting limited but existing detection. The domain appears on one security blocklist, and its SSL certificate is issued by Let’s Encrypt (serial number E7). The use of Cloudflare’s hosting services and a valid SSL certificate may lend an air of legitimacy, complicating manual detection efforts by end users. Users who have visited moonshots-lobby.pages.dev should immediately cease all interaction with the site. If credentials were entered, they must be changed across all platforms where similar login details were reused. Devices used to access the domain should undergo a full security scan to detect potential malware or unauthorized access. Network administrators are advised to block the domain and its resolving IP (188.114.97.3) at the firewall or DNS level to prevent further exposure. Monitoring for unusual account activity or unauthorized transactions is strongly recommended, particularly for users who engaged with the site under the assumption of legitimacy.