moonshot-listing-c3n[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat designed to deceive users by mimicking Moonshot, a known cryptocurrency project. The infrastructure is actively impersonating Moonshot’s branding, as evidenced by the page title 'Vote to List — Powered by Moonshot,' which closely resembles legitimate promotional or governance pages used by crypto platforms. Brand impersonation of this nature typically aims to manipulate users into disclosing sensitive information, authorizing malicious transactions, or interacting with fraudulent smart contracts, often leading to financial loss or account compromise. Analysis indicates the domain moonshot-listing-c3n.vercel.app is registered through Vercel Inc. and resolves to the IP address 64.29.17.195, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common but not inherently trustworthy provider for malicious domains. Security vendors on VirusTotal flag this domain at a rate of 12 out of 95, indicating moderate to high detection across the industry. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, further confirming its malicious classification. No legitimate creation date or historical context is provided, suggesting recent deployment for short-term malicious campaigns. Mitigation against brand impersonation threats of this type requires multi-layered verification. Users should cross-reference all URLs with official Moonshot communication channels, avoiding any domain not explicitly listed on verified social media or documentation. Wallet software and browser extensions with built-in blocklists should be enabled to prevent interaction with known malicious infrastructure. If engagement has already occurred, users must revoke any suspicious smart contract approvals using blockchain explorers or dedicated revocation tools. Organizations should monitor for similar domains using pattern-based detection (e.g., 'moonshot-listing-*.vercel.app') and preemptively block newly observed variants to disrupt attacker infrastructure.