moonshot-listing-tqa[.]netlify[.]app

This report analyzes the threat posed by the domain moonshot-listing-tqa.netlify.app. The site presents itself with the page title "Vote to List — Powered by Moonshot" and is classified as an impersonation scam, specifically targeting the Moonshot brand. The primary threat is that the site attempts to deceive users into believing it is an official Moonshot platform, likely to harvest credentials, personal data, or induce fraudulent transactions under the guise of a voting or listing mechanism.

Technical analysis reveals significant malicious indicators. VirusTotal shows 10 out of 95 vendors flagged the domain, including CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, and Fortinet. The site is hosted on IP address 18.208.88.157 (located in Germany, AS16509 Amazon.com, Inc.) and registered through Netlify. The SSL certificate is issued by DigiCert Inc, using DigiCert Global G2 TLS RSA SHA256 2020 CA1. The domain's nameservers are reported as NS_NOT_FOUND, and it has 3 blocklist entries.

The domain status is currently ACTIVE. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 100, indicating a critical threat level. Users should avoid any interaction with this site due to its high-risk impersonation nature and confirmed malicious detection across multiple security vendors.