portal-moonshot-lists[.]live

This domain, www.portal-moonshot-lists.live, is flagged as a brand impersonation threat targeting Moonshot, a cryptocurrency project. Analysis indicates the site masqueraded as an official token voting portal with the page title 'Moonshot – Vote your token to get listed!' to lure users into interacting with fraudulent content. No direct evidence of a crypto drainer kit was observed, but the domain’s intent aligns with credential harvesting or token manipulation schemes. Infrastructure analysis reveals the domain resolved to IP address 216.150.1.1 and was detected by 15 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was assigned a trust score of 0/100. Technologies detected include Vercel for hosting, Unpkg for asset delivery, and HSTS implementation, suggesting an attempt to appear legitimate. The registrar and creation date remain undisclosed, and no Google Safe Browsing (GSB) flags were recorded at the time of analysis. The domain is currently offline, likely taken down due to detection by security blocklists or hosting provider intervention. While the immediate threat is mitigated, users who interacted with the site may remain at risk of follow-up attacks, such as phishing emails or wallet compromise attempts. Organizations and individuals are advised to monitor for unauthorized transactions, revoke permissions granted to suspicious domains, and verify the authenticity of any Moonshot-related communications through official channels.