moonshot-listing-48p[.]netlify[.]app

Analysis of moonshot-listing-48p.netlify.app indicates an active generic phishing infrastructure. The domain is hosted on Netlify, as shown by the registrar information, and resolves to the IP address 63.176.8.218. No nameserver records were returned (NS_NOT_FOUND), which is consistent with Netlify's managed DNS configuration. The site appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that security operators have observed malicious use.

VirusTotal records show that the domain was scanned by 91 antivirus and URL scanning vendors; none of the vendors flagged the domain at the time of scanning, but the absence of detections does not substantiate safety and should not be taken as a clearance signal. The current status remains active, meaning the domain continues to resolve and can be accessed. No public page title, SSL certificate details, or content analysis are available in the provided intelligence, leaving the exact phishing lure and targeted brand undefined.

Given the blocklist presence, the Netlify hosting context, and the active resolution to a public IP, defenders should treat the domain as high‑risk. Recommended mitigation steps include adding the domain and its resolving IP to network deny lists, monitoring Netlify‑hosted subdomains for similar patterns, and employing URL filtering solutions that reference the blocklists where the domain is listed. Continuous re‑scanning with threat‑intel platforms is advised to capture any future changes in detection status or content modifications.