moonshot-listing-k0x[.]netlify[.]app

Analysis of moonshot-listing-k0x.netlify.app indicates that the domain is hosted on Netlify and currently resolves to the IPv4 address 35.157.26.135. The domain remains active and is listed on three external security blocklists. It is already blocked by the PhishDestroy, MetaMask, and SEAL filtering services, suggesting that at least some downstream protections have identified it as malicious.

VirusTotal reports that the domain has been scanned by 91 anti‑malware vendors; none of those vendors have raised a detection at the time of the scan, but the absence of detections does not imply benign intent. The registrar information shows the domain is registered through Netlify, and the nameserver query returned NS_NOT_FOUND, indicating that standard DNS delegation data is unavailable or concealed. No SSL/TLS certificate details, HTTP status codes, page titles, or content analyses are currently available, so the exact phishing lure or targeted brand cannot be confirmed.

Given the generic phishing classification and the active hosting environment, defenders should continue to block the domain at network perimeter and email gateways, monitor DNS queries for the resolved IP address, and consider adding the domain to internal blocklists. Ongoing observation is recommended to detect any future changes in content, certificate deployment, or additional detections from threat‑intelligence feeds.