moonshot-listing-pgq[.]netlify[.]app

moonshot-listing-pgq.netlify.app impersonates the Moonshot brand, luring users into a fraudulent token listing scheme. The domain is active and hosted on an IP address in Germany, under Amazon's infrastructure. It has a high platform risk score of 100/100, indicating significant potential for harm.

The domain is flagged as malicious by 12 out of 91 vendors on VirusTotal, and it appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The scam involves convincing users to vote for their token to be listed, a common tactic to exploit trust in the cryptocurrency community. The SSL certificate is issued by DigiCert, adding a veneer of legitimacy.

Despite its recent detection on June 20, 2026, the domain's malicious nature is evident through its impersonation tactics and high risk scores. The abuse score of 19/100 suggests some level of awareness but not enough to deter potential victims. This domain exemplifies the ongoing threat posed by phishing sites that exploit brand trust and the lag in detection by traditional security measures.