moonshot-listing-v74[.]netlify[.]app

The domain moonshot-listing-v74.netlify.app is currently flagged as a high‑risk brand‑impersonation site targeting the Moonshot brand. Registration data shows the domain was provisioned through Netlify, and DNS resolution points to the IPv4 address 35.157.26.135. The domain appears on three security blocklists, specifically PhishDestroy, MetaMask, and SEAL, indicating that multiple threat‑intel feeds have observed malicious activity linked to this host. VirusTotal processed the domain with scans from 91 vendors; at the time of analysis none of the vendors reported a detection, which does not constitute evidence of safety.

The brand target is explicitly identified as Moonshot, and the seed identifier for this case is bb63fa. No page title, TLS certificate details, HTTP status code, or trust‑score metrics have been published, so the exact content and web‑application behavior remain unknown. Nameserver lookup returned NS_NOT_FOUND, suggesting that standard DNS‑based controls may not retrieve authoritative records for this host. Because the infrastructure is hosted on Netlify, the IP address resides within Netlify’s shared hosting pool, making attribution to a single operator difficult.

Defenders should proactively block the domain at perimeter firewalls and proxy filters, add the IP address 35.157.26.135 to deny lists, and incorporate the three blocklist entries into automated web‑filtering solutions. Continuous monitoring of Netlify‑hosted assets for similarly structured domains is recommended, as is user education for Moonshot customers to verify URLs before entering credentials. Organizations should also consider enforcing multi‑factor authentication for Moonshot accounts and establishing a reporting channel for any suspicious login attempts. The domain remains active as of the report date, August 06, 2026, and should be treated as a live threat.