moonshot-listing-ach[.]netlify[.]app

This report analyzes the domain moonshot-listing-ach.netlify.app, which is an active impersonation site. The page title, "Vote to List — Powered by Moonshot," indicates it falsely claims affiliation with the Moonshot brand. The threat posed is an impersonation scam, where visitors may be deceived into providing sensitive information or performing actions under the belief they are interacting with a legitimate Moonshot service.

Technical analysis from VirusTotal shows 6 out of 95 security vendors flagged the domain as malicious, with detections from CyRadar, ESET, Forcepoint ThreatSeeker, G-Data, and Kaspersky. The domain is registered through Netlify and resolves to IP address 2a05:d014:58f:6200::259, located in Germany and hosted on AS16509 (Amazon.com, Inc.). SSL certificate is issued by DigiCert Inc, using the DigiCert Global G2 TLS RSA SHA256 2020 CA1. Nameservers were not found (NS_NOT_FOUND), and the domain is currently active.

The domain remains active with a GridinSoft trust score of 0 out of 100 and a DOM risk score of 90, indicating a high threat level. Three blocklists have flagged this domain. The combination of low trust rating, high risk score, and multiple vendor detections confirms this is a malicious impersonation site requiring immediate attention.