moonshot-listing-vpb[.]netlify[.]app

Moonshot-listing-vpb.netlify.app is an active phishing domain that impersonates the cryptocurrency brand Moonshot. It aims to deceive users into voting for tokens to get listed, a common tactic in crypto scams. Detected by PhishDestroy on June 21, 2026, this domain has already been flagged as malicious by 15 out of 91 vendors on VirusTotal, indicating a significant threat level.

The domain is hosted on an Amazon.com, Inc. IP address in Germany, with SSL certification issued by DigiCert Inc. Its presence on three public blocklists, including PhishDestroy, MetaMask, and SEAL, further underscores its malicious intent. The platform risk score for this domain is an alarming 100 out of 100, while its abuse score stands at 19 out of 100, highlighting its potential for harm.

The use of Netlify as a registrar and hosting platform suggests a strategy to exploit trusted services for malicious purposes. By mimicking Moonshot, the scammers aim to exploit the trust users place in the brand. The domain's early detection by PhishDestroy, ahead of many antivirus vendors, exemplifies the importance of timely threat intelligence in combating phishing scams.