moonshot-listing-vyd[.]netlify[.]app

moonshot-listing-vyd.netlify.app is actively impersonating the Moonshot brand to deceive users. Detected by PhishDestroy on June 20, 2026, the domain is flagged by 1 out of 91 vendors on VirusTotal and listed on 3 public blocklists, including PhishDestroy, MetaMask, and SEAL. The scam site invites users to 'Vote your token to get listed!', a common lure in crypto scams.

This domain is registered through Netlify and hosted on an Amazon server in Germany, with an IP address of 35.157.26.135. The SSL certificate is issued by DigiCert Inc, ensuring encrypted connections, which may falsely reassure potential victims. Despite the low abuse score of 1/100, the platform risk score is significantly high at 83/100, indicating a serious threat level.

The presence of this domain on multiple blocklists underscores its malicious intent. The site exploits the trust in the Moonshot brand, aiming to extract sensitive information or funds from unsuspecting users. The early detection by PhishDestroy highlights the importance of proactive threat identification, capturing the domain before widespread recognition by antivirus databases. This proactive approach is crucial, as phishing domains often exploit the delay in AV database updates to operate under the radar.