moonshot-listing-gzy[.]vercel[.]app

This domain, moonshot-listing-gzy.vercel.app, is flagged as a high-risk brand impersonation site targeting Moonshot. The page presents a fraudulent voting interface titled 'Vote to List — Powered by Moonshot,' designed to deceive users into engaging with malicious content. No explicit crypto drainer kit signatures were detected in initial scans, though the impersonation tactic aligns with common phishing campaigns targeting cryptocurrency communities. Analysis indicates the domain is registered through Vercel Inc. and resolves to IP address 64.29.17.131, hosted on Amazon.com, Inc. infrastructure (AS16509). VirusTotal detection metrics show 11 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists, and its SSL certificate is issued by Google Trust Services (WR1). No Google Safe Browsing (GSB) listing was observed at the time of analysis, though this may change as the threat evolves. The domain remains active, with no takedown actions confirmed. Response measures should include immediate blacklisting in enterprise security tools, user education on recognizing brand impersonation tactics, and monitoring for secondary payload delivery. The remaining risk is elevated due to the domain's operational status and its association with a trusted hosting provider, which may delay detection by less sophisticated security controls.