moonshot-listing-gyb[.]netlify[.]app

This domain, moonshot-listing-gyb.netlify.app, poses a high risk of brand impersonation. It is designed to mimic the official Moonshot website and deceive users into believing they are interacting with a legitimate service. The primary goal of this site is to trick users into providing sensitive information or performing actions that could result in financial loss or data compromise.

Analysis indicates that the domain is registered through Netlify and resolves to the IP address 54.253.94.210, which is located in Germany (DE) under the Amazon.com, Inc. ASN (AS16509). The site's SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1. As of the latest report, 7 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL.

If a user has visited moonshot-listing-gyb.netlify.app, it is crucial to take immediate action. First, the user should change any passwords or credentials that were entered on the site, especially if these credentials are used for other accounts. It is recommended to run a full system scan using updated antivirus software to detect and remove any potential malware. Finally, users should report the incident to their financial institutions and monitor their accounts for any unauthorized activity. Staying vigilant and avoiding suspicious links or websites can help prevent such security risks.