Is moonshot-voting-jy2.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Vote to List" interface branded "Powered by Moonshot". It appears to invite visitors to vote on which assets or projects should be listed on a platform, presumably in a crypto or token-listing context. It runs on a free subdomain of a shared application-hosting platform rather than on an independently registered domain, and it presents only a short page of content, which points to a community-voting or promotional front end.

Scam/Impersonation Risk

Contradictory signals are present. Several tier-one security vendors currently flag the site as malicious, and the aggregate detection count is high enough that the site is confirmed as blacklisted by external threat-intelligence sources. No brand impersonation, no conflicting legal identities and no confirmed phishing page were observed, so the contradiction rests on the blacklisting. That blacklisting is decisive, however. A listing-vote page of this kind is a common lure for token-promotion and wallet-linked schemes, which makes the reputation hit especially relevant. A large volume of abuse reports is also attached to the shared hosting address. These were discounted because the address is shared provider infrastructure used by many unrelated sites, so they are not attributed to this site. Behavioral testing was mixed. No wallet-connection prompts, clipboard manipulation, hidden forms, credential forms posting off-site or content cloaking were seen. However, the page generated a high volume of calls to outside services, including several data submissions to destinations outside the platform's usual set, and it produced numerous script errors and heavy page-structure churn after interaction. This is consistent with a hastily assembled or unstable front end that sends data to third parties. Evidence:

• Homepage: external threat-intelligence sources report 15 malicious and 2 suspicious detections, including three tier-one security vendors.
• Homepage behavioral sandbox: 23 external data requests and 11 external POST submissions, of which 3 POSTs went to non-whitelisted destinations, alongside 22 console errors and about 1,488 page-structure mutations after interaction.
• Homepage behavioral sandbox: no wallet-connect, clipboard-write, hidden-form or cloaking behavior detected across 3 successful runs.
• Domain provenance: the domain is about 14 days old (registered 2026), with 2 archive snapshots, both dated 2026-10-11 (1 year tracked).

Regulatory Verification Notes

The captured page discloses no operating company, jurisdiction, licence or registration number, and no legal or terms pages were captured. For a site inviting participation in asset-listing decisions, that omission is a notable content gap. The operator's real-world identity could not be independently connected to any person or brand, and the ownership and governance picture is opaque. Because the site sits on a shared platform subdomain, there is no standalone registrant record to anchor accountability. No third-party broker or regulatory-database entry matched this site, so there is no external signal either for or against its regulatory standing. A missing licence is a transparency gap and not proof of fraud by itself. Here it compounds the blacklisting rather than standing alone. Evidence:

• Homepage: no company name, licensing statement, registration number or physical address is presented.
• Hosting: served from AS16509 (Amazon-02, US); TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27.
• Third-party broker dataset: no match for this site.

What to Verify Next

Before any engagement, the connection between this page and the "Moonshot" brand it invokes should be tested through channels not linked from the page. This means checking the brand's officially published website and social accounts for any mention of this voting page. Any claim about listing eligibility, voting rights or token distribution should be confirmed with the named project's own team through contact details obtained independently. The operator's identity and any licensing claim should be requested in writing and checked against the relevant registry. Any later change in the external detection status should be rechecked before the site is reconsidered. Evidence:

• Homepage: the "Powered by Moonshot" branding is the only identity claim and has no supporting attribution.
• Homepage: no voting mechanics, eligibility rules or governance documentation were captured to validate.
• Site footprint: no legal, about or contact pages were captured.

Summary Verdict

The site presents an elevated-risk posture. Confirmed external blacklisting, a very young footprint and an unverified operator identity converge, and none of the technical hygiene present is enough to offset them. Apparent legitimacy cannot be inferred from the available evidence.

Infrastructure Integrity

The site is hosted on Amazon-operated infrastructure in the United States and fronted by a shared edge network. All observed addresses are edge servers, and the origin server was not observable, which limits independent hosting verification. A valid TLS certificate and mainstream infrastructure are mitigating factors only. They show technical competence in deployment and do not offset the reputational detections or demonstrate legitimacy.

Closing Assessment

Interaction should be limited to passive viewing. No account login, credential entry, wallet connection, token approval or payment should be made on this site. Any prompt to connect a wallet, sign a transaction or send funds in connection with a listing vote should be declined until the operator is independently verified and the external detections are cleared.

Signals weighed against the site

• AbuseIPDB: 92 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.