moonshot-listing-bvs[.]vercel[.]app

This domain, moonshot-listing-bvs.vercel.app, is flagged for brand impersonation targeting Moonshot, a cryptocurrency project. Analysis indicates the site presents a fraudulent token voting page titled 'Moonshot – Vote your token to get listed!', designed to deceive users into interacting with malicious smart contracts or disclosing wallet credentials. The threat type aligns with crypto-drainer schemes, where victims may unknowingly authorize transactions leading to fund theft or token compromise. Infrastructure analysis reveals the domain is hosted on Vercel Inc. infrastructure, resolving to IP address 64.29.17.195 within Amazon.com, Inc.'s AS16509 network. The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious sites. VirusTotal detection shows 10 out of 95 security vendors flagging the domain as malicious, while it appears on three distinct security blocklists. The domain remains active as of this report, with no public record of its creation date available through standard WHOIS or passive DNS sources. Current status confirms the domain is still operational, posing an ongoing high-risk threat to users. Response actions by security entities include blocking by PhishDestroy, MetaMask, and SEAL, though the site remains accessible through standard browsers. The remaining risk stems from its active hosting on a legitimate platform (Vercel), which may delay takedown efforts. Users are advised to avoid interaction with the domain, verify token voting pages exclusively through official Moonshot channels, and employ wallet transaction simulation tools to inspect contract behavior before approval. Monitoring for similar domains using the 'moonshot-listing' naming pattern is recommended for proactive defense.