moonshot-listing-jf4[.]vercel[.]app

The domain moonshot-listing-jf4.vercel.app is actively engaged in brand impersonation, specifically targeting Moonshot, a recognized entity in the cryptocurrency sector. This campaign presents itself under the page title 'Vote to List — Powered by Moonshot,' designed to deceive users into believing they are interacting with an official Moonshot platform. The domain remains operational as of the latest verification, posing a high-risk threat to unsuspecting users. Analysis of the domain reveals multiple technical indicators of malicious activity. The domain is flagged by 9 of 95 security vendors on VirusTotal, indicating widespread detection as a phishing resource. Infrastructure analysis shows the domain resolves to the IP address 64.29.17.3, geolocated within the United States under Amazon.com, Inc.'s AS16509 autonomous system. The domain is registered through Vercel Inc., a hosting provider frequently exploited for rapid deployment of phishing pages. Additionally, the domain appears on three distinct security blocklists, further corroborating its malicious classification. The SSL certificate is issued by Google Trust Services (WR1), a detail often leveraged to lend an appearance of legitimacy to fraudulent sites. Current assessment confirms the domain remains active and continues to pose a significant risk. Users are strongly advised to avoid interaction with moonshot-listing-jf4.vercel.app and any associated subdomains or redirects. Network administrators should implement immediate blocking measures for the domain and its resolving IP address. Organizations are recommended to monitor for similar impersonation attempts, particularly those leveraging cloud-based hosting platforms for rapid deployment. Enhanced user education on recognizing brand impersonation tactics, such as scrutinizing page titles, SSL certificates, and registrar details, is critical to mitigating exposure to this threat.