moonshot-listing-s2x[.]vercel[.]app

This domain operates as a fraudulent token voting platform under the guise of the Moonshot cryptocurrency brand. The site displays a page titled 'Vote to List — Powered by Moonshot,' designed to deceive users into participating in a fake listing process. Victims are likely prompted to connect cryptocurrency wallets or submit sensitive credentials, risking unauthorized access to funds or personal data. Analysis indicates this infrastructure is actively malicious, with 9 out of 95 security vendors on VirusTotal flagging the domain. The site is hosted on Vercel Inc. infrastructure, resolving to IP address 216.198.79.67 (AS16509, Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious sites. The domain appears on three security blocklists, including detection by major threat intelligence feeds. If this site was visited, immediate action is required. Disconnect any linked wallets and revoke permissions using official blockchain explorers. Scan devices for malware using updated security tools. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions. Change credentials for any accounts accessed while the site was open, prioritizing email and crypto-related services. Report the incident to relevant financial institutions and cryptocurrency platforms to assist in tracking fraudulent activity.