Impersonation

The page uses Moonshot branding and a community token-voting flow, but the supplied domain vote-id-gfkkcrku.portallogonapp.surf is unrelated to Moonshot. This clear brand-domain mismatch indicates an impersonation lure likely targeting crypto users.