moonshot-listing-3nn[.]vercel[.]app

The domain moonshot-listing-3nn.vercel.app is assessed as a high-risk brand impersonation threat targeting the Moonshot brand. This phishing domain is designed to deceive users by mimicking the official Moonshot website, potentially leading to credential theft or financial loss.

Analysis indicates that 11 out of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting a significant level of suspicion. The domain is registered through Vercel Inc., a popular web development platform, and resolves to the IP address 64.29.17.131, which is located in the United States and belongs to AS16509, operated by Amazon.com, Inc. The SSL certificate is issued by Google Trust Services / WR1, which can lend a false sense of security to unsuspecting visitors. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further confirming its malicious nature. The page title 'Vote to List — Powered by Moonshot' is crafted to appear legitimate, enhancing the domain's ability to trick users.

To mitigate the risks associated with this brand impersonation threat, users should avoid interacting with the domain moonshot-listing-3nn.vercel.app and verify the authenticity of any links or URLs related to Moonshot through official channels. Security teams should consider blocking the domain and the associated IP address 64.29.17.131 to prevent access. Additionally, network administrators can configure firewalls and DNS filters to restrict access to this and similar suspicious domains. Users should also be educated on recognizing phishing attempts and the importance of double-checking URLs before entering sensitive information.