moonshot-listing-q9s[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation phishing site targeting Moonshot, a recognized cryptocurrency or blockchain-related entity. The site presents itself as a legitimate voting platform under the guise of Moonshot, with the page title 'Vote to List — Powered by Moonshot,' aiming to deceive users into disclosing sensitive credentials or transferring assets under false pretenses. Analysis indicates the domain moonshot-listing-q9s.vercel.app is hosted on infrastructure associated with Vercel Inc. and resolves to the IP address 64.29.17.131, geolocated within the United States under Amazon.com, Inc.'s AS16509. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 9 out of 95 security vendors flagging this domain as malicious. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate in origin, does not mitigate the domain's fraudulent intent. No creation date is provided, but the domain remains active and unremediated at the time of assessment. Mitigation steps for this specific threat type include immediate blacklisting of the domain and its associated IP address (64.29.17.131) across all network security appliances. Organizations should update endpoint protection rules to block access to the domain and monitor for any attempts to access it from internal networks. Users should be alerted to the presence of this phishing site, particularly those interacting with Moonshot-related services, and advised to verify the authenticity of any voting or listing platforms through official channels. Security teams are recommended to conduct retrospective analysis of logs for any prior interactions with this domain and investigate potential credential exposure or unauthorized transactions.