moonshot-listing-h4c[.]vercel[.]app

This domain, moonshot-listing-h4c.vercel.app, is actively impersonating the Moonshot brand to conduct fraudulent activities. The site presents itself as a legitimate voting or listing platform for cryptocurrency projects under the guise of being "Powered by Moonshot." Users who interact with this domain risk exposure to malicious scripts designed to compromise digital wallets, steal credentials, or execute unauthorized transactions. The threat is particularly dangerous for individuals involved in cryptocurrency, as the site may deploy crypto drainers to siphon funds from connected wallets without explicit user consent. Analysis indicates this domain is a high-risk threat based on multiple technical indicators. It is flagged by 11 out of 95 security vendors on VirusTotal, demonstrating a significant detection rate across the cybersecurity industry. The domain is hosted on infrastructure registered through Vercel Inc. and resolves to the IP address 216.198.79.67, associated with Amazon.com, Inc. (AS16509). The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as malicious actors frequently use valid certificates to lend false legitimacy to phishing sites. Additionally, the domain appears on three security blocklists, including those maintained by reputable threat intelligence providers, further confirming its malicious nature. If you have visited moonshot-listing-h4c.vercel.app or interacted with its content, immediate action is required to mitigate potential damage. First, disconnect any cryptocurrency wallets or accounts linked to the site and revoke all active sessions or permissions granted to the domain. Scan your device using updated antivirus or anti-malware tools to detect and remove any malicious payloads. Monitor your financial and digital accounts for unauthorized transactions or suspicious activity, and report any anomalies to the relevant platforms. If credentials were entered on the site, change passwords immediately and enable multi-factor authentication where available. Users should also report the domain to their wallet provider or cryptocurrency exchange to help prevent further victimization.