moonshot-listing-bbm[.]vercel[.]app

This domain, moonshot-listing-bbm.vercel.app, operates as an active brand impersonation campaign targeting users of the Moonshot platform. The site presents itself as an official "Moonshot Listing Vote" page, likely designed to deceive visitors into submitting sensitive credentials, wallet information, or other authentication details under the false pretense of participating in a token listing or governance process. The use of brand-specific terminology and a legitimate-looking interface increases the likelihood of successful social engineering, particularly among users familiar with cryptocurrency or decentralized finance platforms.

Infrastructure analysis reveals the domain was registered through Vercel Inc. on June 15, 2026, and currently resolves to the IP address 216.198.79.131. Despite its recent creation, the domain has already been flagged on three independent security blocklists, including high-confidence threat intelligence sources. Notably, the domain has not yet been detected by antivirus engines, with a VirusTotal score of 0/95 detections. The SSL certificate is issued by Google Trust Services under the WR1 root, providing a superficial layer of legitimacy while obscuring the malicious intent of the site.

Users who have visited moonshot-listing-bbm.vercel.app or interacted with its content are advised to take immediate remedial action. Any credentials, wallet addresses, or personal information entered on the site should be considered compromised. Affected individuals should revoke access to any connected accounts, rotate passwords, and monitor for unauthorized transactions or account activity. Additionally, users should report the domain to their security providers and consider implementing additional verification steps for any communications claiming to originate from Moonshot or related platforms.