moonshot-listing-d7i[.]vercel[.]app

This domain, moonshot-listing-d7i.vercel.app, is flagged as a high-risk brand impersonation threat targeting Moonshot, a cryptocurrency project. The site presents itself as a token voting platform under the title 'Vote to List — Powered by Moonshot,' designed to deceive users into interacting with fraudulent smart contracts or disclosing sensitive wallet credentials. Analysis indicates the domain is part of a broader campaign to exploit trust in the Moonshot brand, likely aiming to facilitate token drain or unauthorized transactions. Infrastructure analysis reveals the domain is hosted on Vercel Inc.'s platform and resolves to the IP address 64.29.17.3, associated with AS16509 (Amazon.com, Inc.). The domain is currently active and has been flagged by 8 out of 95 security vendors on VirusTotal, indicating widespread detection. It appears on three security blocklists and is blocked by multiple cryptocurrency security tools. The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious domains to evade basic security checks. No specific creation date is available, but the domain's structure and hosting suggest recent deployment. The domain remains active as of the latest verification, posing an ongoing risk to users. Response actions by security providers, including PhishDestroy, MetaMask, and SEAL, have mitigated some exposure, but the site continues to operate. Users are advised to avoid interaction with the domain, verify URLs through official Moonshot channels, and employ wallet security measures such as hardware wallets or isolated browser sessions for cryptocurrency transactions. The high-risk classification is justified by the domain's active status, brand impersonation tactics, and confirmed detection by multiple security vendors.