# moonlit-custard-5fee2b.netlify.app — MALICIOUS

> Moonlit-custard-5fee2b.netlify.app is a live credential-stealing phishing site. 8/95 security vendors flag it. Check the full report.

## Summary
PhishDestroy identifies moonlit-custard-5fee2b.netlify.app as an active credential-phishing domain currently luring visitors into disclosing sensitive login details. The threat has been elevated due to confirmed live phishing pages that harvest usernames and passwords in real time.  

This domain was flagged by 8 of 95 VirusTotal security vendors, carries a DigiCert Inc SSL certificate, resolves to the Amazon AWS IP 35.157.26.135, and has been explicitly blocked by the OpenPhish blocklist. It was registered recently through Netlify, confirming the infrastructure is intentionally short-lived. With a presence on one additional public blocklist, the site exhibits all hallmarks of a fast-burn phishing operation: low trust scores, minimal age, and heavy reliance on reputable hosting to evade early detection.  

To mitigate credential theft, avoid entering any login credentials on this domain or any page it links to. Bookmark trusted sites directly instead of following emailed or social-media links. If you accidentally submit information, change passwords immediately and enable multi-factor authentication on all related accounts. Report the incident to your IT department or the Anti-Phishing Working Group (apwg.org).

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Netlify
- IP: 35.157.26.135

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["OpenPhish"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/moonlit-custard-5fee2b.netlify.app
- PhishDestroy: https://phishdestroy.io/domain/moonlit-custard-5fee2b.netlify.app/
- LLM endpoint: https://phishdestroy.io/domain/moonlit-custard-5fee2b.netlify.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonlit-custard-5fee2b.netlify.app/
Last updated: 2026-04-08