moonshot-listing-dc4[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Moonshot, a cryptocurrency project. The site presents itself as a "Vote to List" platform under the guise of official Moonshot affiliation, likely designed to harvest user credentials, wallet information, or other sensitive data under false pretenses. Analysis indicates the domain is actively exploiting trust in the Moonshot brand to deceive users into participating in fraudulent voting or listing processes. Infrastructure analysis reveals the domain moonshot-listing-dc4.vercel.app is registered through Vercel Inc. and resolves to the IP address 64.29.17.3, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious domains. VirusTotal reports 10 out of 95 security vendors flagging this domain as malicious, while it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title, "Vote to List — Powered by Moonshot," further reinforces the impersonation attempt by mimicking official branding. Mitigation steps for this specific threat type include immediate domain blocking at the network and endpoint levels, particularly for entities involved in cryptocurrency or digital asset management. Organizations should update their security blocklists to include this domain and its associated IP address (64.29.17.3) to prevent access. Users should be educated to verify the authenticity of voting or listing platforms by cross-referencing official communications from Moonshot’s verified channels. Additionally, monitoring for similar Vercel-hosted domains with "moonshot" in the subdomain or path may help preemptively identify related impersonation attempts.