moonshot-listing-yac[.]vercel[.]app

This domain, moonshot-listing-yac.vercel.app, is identified as a high-risk brand impersonation threat targeting Moonshot. The page presents itself as a voting platform under the title 'Vote to List — Powered by Moonshot,' likely designed to deceive users into participating in fraudulent listing or token approval processes. Analysis indicates the infrastructure is specifically crafted to mimic legitimate Moonshot communications, potentially leading to credential harvesting or unauthorized transaction signing. Infrastructure analysis reveals the domain resolves to IP address 216.198.79.131, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), and the domain is registered through Vercel Inc. Security vendors on VirusTotal flag this domain at a score of 10/95, while it appears on three distinct security blocklists. The domain remains unlisted on Google Safe Browsing at the time of analysis, though it is actively blocked by multiple wallet protection and anti-phishing systems. The domain remains active and continues to pose a significant risk to users. Despite being flagged by security vendors and blocklists, the infrastructure persists, indicating potential ongoing campaigns. Users are advised to verify domain authenticity before interacting with any voting or listing platforms claiming affiliation with Moonshot. Organizations should monitor for similar impersonation attempts and implement domain-based blocking for this and related infrastructure.