moonshot-listing-87q[.]vercel[.]app

The domain moonshot-listing-87q.vercel.app is actively flagged for impersonating Moonshot, a notable brand. It has been detected by 10 out of 91 VirusTotal vendors and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain is hosted on an IP address associated with Amazon.com, Inc., located in the US, and uses an SSL certificate issued by Google Trust Services.

This domain employs cloaking techniques, serving benign content to scanners to avoid detection, as indicated by its low cloaking score of 1/10. Despite this, its platform risk score is a full 100/100, highlighting the significant threat it poses. The domain's early detection by PhishDestroy on June 18, 2026, underscores its potential danger before broader security systems could flag it.

The registrar, Vercel Inc., is known for hosting various applications, which may lend an air of legitimacy to the unsuspecting user. However, the combination of its high risk score and its presence on multiple blocklists suggests that it is part of a sophisticated phishing campaign aimed at exploiting the Moonshot brand. This case exemplifies how phishing domains can exploit the gap between registration and detection, leveraging advanced techniques to deceive both users and security systems.