moonshot-listing-9bm[.]vercel[.]app

This domain, moonshot-listing-9bm.vercel.app, poses a high-risk brand impersonation threat targeting users of Moonshot, a cryptocurrency platform. The site displays a fraudulent "Vote to List — Powered by Moonshot" page, designed to deceive visitors into believing it is an official Moonshot service. The intent is likely to harvest credentials, private keys, or other sensitive information under the guise of a legitimate voting or listing process, a common tactic in cryptocurrency-related phishing campaigns.

Analysis indicates the domain is flagged by 11 out of 95 security vendors on VirusTotal, a significant detection rate for a newly observed threat. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.3, hosted on Amazon.com, Inc. infrastructure (AS16509). The SSL certificate is issued by Google Trust Services (WR1), which, while providing encryption, does not validate legitimacy. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further corroborating its malicious nature.

Users who have visited moonshot-listing-9bm.vercel.app should immediately revoke any permissions granted to the site, particularly if cryptocurrency wallets or accounts were accessed. All credentials or private keys entered on the site should be considered compromised and replaced. It is recommended to monitor associated accounts for unauthorized transactions and report the incident to relevant security teams or platforms. Browser and security software should be updated to ensure the domain is blocked in future interactions.