moonshot-listing-3n9[.]vercel[.]app

The domain moonshot-listing-3n9.vercel.app is actively engaged in brand impersonation, specifically targeting the Moonshot brand. This domain poses a significant risk as it can deceive users into believing they are interacting with a legitimate Moonshot service, potentially leading to financial loss or the compromise of sensitive information.

Analysis indicates that this domain has been flagged by 11 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus among the security community regarding its malicious nature. The domain is registered through Vercel Inc., a well-known registrar, which can sometimes be exploited by threat actors for credibility. The SSL certificate is issued by Google Trust Services / WR1, further adding to the illusion of legitimacy. Infrastructure analysis reveals that the domain resolves to the IP address 64.29.17.3, which is located in the United States and is part of the AS16509 network operated by Amazon.com, Inc. The domain is also listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL.

If users have visited this domain, they should immediately check their accounts for any unauthorized activity and consider changing their passwords. It is recommended to report the incident to the Moonshot support team and the relevant authorities. Users should also monitor their financial statements and credit reports for any signs of fraud. To avoid similar threats in the future, users should verify the legitimacy of websites by checking the URL, SSL certificate, and any security warnings provided by their browser or security software.