ave-moonshot[.]com

This domain, ave-moonshot.com, is flagged as a brand-impersonation threat targeting Aave, a decentralized finance protocol. The site presents itself as a "Moonshot – Vote for your token to get listed!" platform, likely designed to deceive users into interacting with malicious smart contracts or disclosing wallet credentials under the guise of a legitimate governance process. No direct drainer kit signatures were identified, but the infrastructure aligns with common phishing tactics observed in crypto-related scams. Analysis indicates the domain was registered on May 28, 2026, through Name.com, Inc., and resolves to the IP address 216.150.16.1. It is detected by 19 out of 95 security vendors on VirusTotal and appears on one security blocklist. The site employed Vercel for hosting, Unpkg for content delivery, and enforced HSTS, while using a Let's Encrypt SSL certificate to appear legitimate. The creation date is notably in the future, suggesting possible typosquatting or a placeholder registration that was later weaponized. As of the latest verification, ave-moonshot.com has been taken offline, reducing immediate exposure. However, the domain remains registered and could be reactivated or repurposed. Users who interacted with the site should revoke any connected wallet permissions and monitor for unauthorized transactions. Organizations should maintain blocklist entries for this domain and its associated IP to mitigate residual risk.