dfas412fas[.]pages[.]dev

This domain poses a high risk of brand impersonation, specifically targeting the Moonshot brand. The page titled 'Vote to List — Powered by Moonshot' aims to deceive users into believing they are interacting with a legitimate Moonshot service, potentially leading to theft of personal information, credentials, or financial loss.

Analysis indicates that dfas412fas.pages.dev is registered through Cloudflare Pages and was created on April 03, 2026. The domain resolves to the IP address 188.114.96.3, which is located in California and associated with CloudFlare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. Currently, the domain appears on one security blocklist and is blocked by PhishDestroy. According to VirusTotal, 8 out of 95 security vendors flag this domain as malicious, indicating a significant level of suspicion and potential threat.

If users have visited this domain, they are advised to immediately change any passwords or credentials that may have been entered on the site. It is also recommended to monitor financial and account statements for any unauthorized activity. Users should report the incident to their IT security teams or trusted cybersecurity professionals for further analysis and to take appropriate actions to secure their accounts and devices.