moonshot-listing-j76[.]vercel[.]app

This domain, moonshot-listing-j76.vercel.app, poses a high-risk brand impersonation threat specifically targeting Moonshot, a recognized entity in the cryptocurrency sector. The site displays a deceptive interface labeled 'Vote to List — Powered by Moonshot,' designed to mislead users into believing they are interacting with an official Moonshot platform. The intent is likely to harvest sensitive information, such as login credentials or wallet details, under the guise of a legitimate voting or listing process. Given the domain's focus on cryptocurrency-related activity, there is a significant risk of financial loss for users who engage with it. Analysis indicates that the domain is flagged by 10 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. It is registered through Vercel Inc. and appears on three distinct security blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services (WR1), and the domain resolves to the IP address 216.198.79.131, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. Despite these red flags, the domain remains active, increasing the potential for continued exploitation. Users who have visited moonshot-listing-j76.vercel.app should take immediate action to mitigate potential risks. If any credentials or wallet information were entered, they should be considered compromised and revoked or changed without delay. Affected wallets should be disconnected from any suspicious dApps or sites, and all transactions should be reviewed for unauthorized activity. Additionally, users are advised to report the domain to their security software providers and monitor their accounts for signs of further compromise. Employing multi-factor authentication and verifying domain authenticity through official channels can help prevent future incidents.