moonshot-listing-60k[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Moonshot, a recognized entity in the cryptocurrency sector. The domain mimics legitimate branding to deceive users into engaging with fraudulent content, likely aiming to harvest credentials or distribute malicious payloads under the guise of a voting or listing mechanism. The specific threat type—brand impersonation—exploits user trust in the Moonshot name to facilitate unauthorized access or financial theft. Analysis indicates the domain moonshot-listing-60k.vercel.app is hosted on infrastructure registered through Vercel Inc. and resolves to the IP address 216.198.79.131, located within the United States under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains. The domain is currently active and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal detection rates show 10 out of 95 security vendors flagging the domain as malicious. The page title, 'Vote to List — Powered by Moonshot,' reinforces the impersonation by explicitly referencing the targeted brand. Mitigation steps specific to brand impersonation threats include immediate blocking of the domain and its resolving IP (216.198.79.131) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) across endpoint detection and response (EDR) systems, web proxies, and email gateways to prevent user interaction. User awareness training should emphasize verifying domain authenticity, particularly for cryptocurrency-related platforms, by cross-referencing official communication channels. Monitoring for similar domains registered through Vercel or resolving to the same IP range (216.198.79.0/24) is recommended to identify potential follow-up campaigns. If credentials or sensitive data were entered on this domain, affected accounts should be locked, and multi-factor authentication (MFA) tokens rotated immediately.