moonshot-listing-ab0[.]vercel[.]app

This domain, moonshot-listing-ab0.vercel.app, operates as a brand impersonation scheme targeting users of the Moonshot cryptocurrency platform. Analysis indicates the site presents a fraudulent 'Vote to List' interface, falsely claiming affiliation with Moonshot to deceive visitors into engaging with malicious content. The page title 'Vote to List — Powered by Moonshot' directly mimics legitimate platform branding, increasing the likelihood of user compromise through social engineering tactics. Given the domain's focus on cryptocurrency users, the primary threat involves potential asset theft or unauthorized transactions if victims interact with embedded controls. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 11 of 95 security engines on VirusTotal, with additional detections across three independent blocklists. It resolves to IP address 64.29.17.67, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The domain is registered through Vercel Inc., utilizing an SSL certificate issued by Google Trust Services (WR1). While the exact registration date remains unconfirmed, the combination of brand impersonation elements and security vendor detections establishes a clear pattern of malicious intent. Users who have visited moonshot-listing-ab0.vercel.app should immediately cease all interaction and take corrective measures. Any credentials or cryptocurrency wallet information entered on the site should be considered compromised. Affected parties should revoke active sessions, rotate passwords for associated accounts, and monitor wallet addresses for unauthorized transactions. Cryptocurrency users should verify all platform URLs against official sources before interaction, particularly when prompted for voting or listing activities. The domain remains active as of analysis, necessitating continued vigilance from both individual users and organizational security teams.