moonshot-listing-x3[.]netlify[.]app

The domain moonshot-listing-x3.netlify.app was observed on a single security blocklist and is currently listed as blocked by the PhishDestroy feed. Registration data indicates the domain was provisioned through the Netlify hosting service, which is commonly used for static site deployments. VirusTotal records show that the domain has been scanned by 91 distinct engines; none of the engines reported a detection at the time of analysis, but the absence of a flag does not constitute a safety assurance.

The blocklist entry and the PhishDestroy block suggest that the domain is being used in a phishing campaign, consistent with the generic phishing classification supplied in the threat metadata. No additional intelligence such as SSL certificate details, IP address reputation, Safe Browsing status, or page‑title information is available in the current dataset, leaving the full scope of the malicious infrastructure undefined. Defenders should continue to monitor the domain for any changes in reputation, enforce blocking at perimeter filters, and consider adding the domain to internal deny lists.

Because the hosting provider is Netlify, organizations that allow outbound traffic to Netlify endpoints should evaluate whether to restrict or scrutinize connections to this particular sub‑domain. Ongoing correlation with email phishing samples and user‑reported incidents is recommended to confirm whether the domain is being actively leveraged in credential‑harvesting attempts. The current risk posture remains under investigation pending further evidence.