moonshot-listing-h3d[.]netlify[.]app

Analysis indicates that the domain moonshot-listing-h3d.netlify.app is currently active and classified as a generic phishing site. The domain resolves to the IP address 63.176.8.218, which belongs to Netlify’s hosting infrastructure, matching the registration pathway listed as Netlify. Independent blocklist services have flagged the domain, with three distinct security blocklists including PhishDestroy, MetaMask, and SEAL reporting it as malicious.

VirusTotal scans show that one out of ninety‑one security vendors returned a positive detection, reinforcing the presence of malicious activity despite the low overall detection ratio. The domain’s nameserver information is unavailable (NS_NOT_FOUND), suggesting either a non‑standard DNS configuration or a reliance on Netlify’s internal name resolution. No additional data on SSL certificates, HTTP status codes, page titles, or content signatures is presently available, leaving the exact phishing payload and targeted brand unconfirmed.

Given the confirmed resolution to Netlify‑hosted infrastructure, the presence on multiple blocklists, and the single positive vendor detection, defenders should treat the domain as high‑risk. Recommended actions include adding the domain to network deny lists, configuring web proxies to block HTTP requests to the host, and monitoring outbound traffic for connections to 63.176.8.218. Continuous re‑evaluation is advised, as further scanning may reveal additional detections or changes in hosting status.