moonshot-listing-69a[.]netlify[.]app

Analysis of moonshot-listing-69a.netlify.app shows that the domain is hosted on Netlify infrastructure and resolves to the IPv4 address 63.176.8.218. The domain’s authoritative name servers could not be retrieved (NS_NOT_FOUND), which is typical for Netlify‑provided sites that rely on shared DNS. Registration information indicates the domain was provisioned through Netlify, but no further registrar details are available. The domain appears on three independent security blocklists and is actively listed by PhishDestroy, MetaMask, and SEAL as a malicious resource.

VirusTotal records reveal that the site has been scanned by 91 anti‑malware engines; none of the engines reported a detection at the time of the scan, but the absence of detections does not confirm safety. The threat classification in the intelligence set is “generic phishing,” and the current operational status is marked as active. No additional metadata such as SSL certificate details, HTTP response codes, page title, or brand targeting is provided, leaving the exact phishing payload and victim‑targeting vector unknown.

Defenders should treat the domain as high‑risk based on its blocklist presence, hosting profile, and phishing label. Recommended mitigation steps include adding the domain to network‑level deny lists, updating endpoint protection signatures, and monitoring DNS queries for repeated resolutions to 63.176.8.218. Continuous re‑evaluation is advised, as further analysis of the hosted content may reveal additional indicators of compromise.