moonshot-listing-5ht[.]vercel[.]app

The domain moonshot-listing-5ht.vercel.app is identified as a brand impersonation threat targeting the cryptocurrency platform Moonshot. This domain is designed to mimic the official Moonshot website and likely aims to deceive users into providing sensitive information or performing actions that could compromise their security.

Infrastructure analysis reveals that moonshot-listing-5ht.vercel.app resolves to the IP address 64.29.17.67, which is located in the United States and is associated with AS16509 Amazon.com, Inc. The domain is registered through Vercel Inc. and is secured with an SSL certificate issued by Google Trust Services / WR1. The domain was flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. Additionally, the domain appears on three security blocklists, further corroborating its malicious nature. The page title 'Vote to List — Powered by Moonshot' suggests that the domain is attempting to impersonate a legitimate Moonshot service, possibly related to a voting or listing mechanism.

The domain is currently active and continues to pose a high risk to potential victims. Security measures such as blocking by PhishDestroy, MetaMask, and SEAL have been implemented, but users may still be at risk if they bypass these protections. It is recommended that organizations and individuals update their security filters and educate users about the risks of visiting unverified domains. Continuous monitoring of this domain and similar impersonations is essential to mitigate ongoing threats.