votings-moonshot[.]com

PhishDestroy identifies votings-moonshot.com as a live brand impersonation domain that masquerades as Moonshot to trick users into surrendering credentials or transferring crypto assets. The domain was registered on December 02, 2025 through MAT BAO CORPORATION and currently resolves to IP 104.21.14.128. Security scans on VirusTotal show 9 out of 95 antivirus engines flagging the site, indicating it remains under the radar despite active distribution. The domain also holds a valid SSL certificate issued by Google Trust Services, which may help it evade browser warnings and appear legitimate to unsuspecting visitors. Technical indicators further support the classification as a brand impersonation threat. The domain uses a hyphenated variation of “moonshot” paired with a generic term (“votings”) to mimic official communications or voting platforms. The registration date is recent, just days after the current date at the time of analysis, suggesting opportunistic or time-bound campaign tactics. The IP address 104.21.14.128 is associated with multiple low-reputation domains and has been observed hosting crypto-draining scripts in prior incidents. While no active blocklist entries were detected at the time of analysis, the combination of a newly registered domain, low detection rates, and high-risk hosting infrastructure elevates the risk profile to under investigation with potential for rapid escalation. Users who have visited votings-moonshot.com are advised to immediately disconnect from the site, clear browser cache and cookies, and scan their device using updated antivirus software. If any credentials were entered on the site, change passwords immediately and enable multi-factor authentication on all linked accounts. Report the domain to your browser’s safe-browsing program and consider blocking the IP address 104.21.14.128 at the network level. Monitor financial accounts and crypto wallets for unauthorized transactions, as brand impersonation sites often deploy hidden scripts to drain digital assets without user interaction. Always verify domains through official Moonshot channels and avoid clicking unsolicited links promising voting, rewards, or urgent actions involving crypto or personal data.