moonshot-listing-xz[.]netlify[.]app

Analysis of moonshot-listing-xz.netlify.app indicates this domain is under investigation for generic phishing activity as of August 4, 2026. The domain is hosted on Netlify's infrastructure, a platform commonly used for both legitimate and malicious deployments. It appears on one security blocklist and has been flagged by PhishDestroy, though no additional public threat feeds or vendor detections currently confirm its status. VirusTotal reports that 0 out of 91 security vendors have flagged the domain at the time of scanning, though this absence of detections does not confirm safety and may reflect a lack of visibility or delayed analysis.

Infrastructure details reveal the domain is a subdomain of netlify.app, a service that allows rapid deployment of web content without traditional registrar involvement, complicating attribution. No registrar, ASN, or geolocation data is available for this specific subdomain, and SSL certificate details have not been provided in the available intelligence. HTTP status and page content remain unanalyzed, leaving the exact nature of the phishing attempt—such as targeted brands or specific credential-harvesting techniques—unknown.

Defenders should treat this domain as potentially malicious based on its presence on a security blocklist and the PhishDestroy flag. Network-level blocking or monitoring of connections to moonshot-listing-xz.netlify.app is recommended until further analysis confirms its status. Given the lack of additional detections, security teams may prioritize this domain for deeper inspection, including sandboxed visits to capture payloads or redirect chains, while avoiding direct interaction from production environments.