moonshot-listing-8mh[.]netlify[.]app

The domain moonshot-listing-8mh.netlify.app is currently active and resolves to the IP address 63.176.8.218. Registration details indicate that the site is hosted on Netlify, and the nameserver information is listed as NS_NOT_FOUND, suggesting that conventional DNS delegation data is not publicly disclosed. The domain appears on three reputable security blocklists, and it has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a high‑risk credential‑harvesting operation. VirusTotal analysis shows that seven out of ninety‑one scanning engines have flagged the domain, providing additional corroboration of malicious intent.

No public page title or content analysis is available at this time, leaving the specific lure or targeted brand undefined. Infrastructure analysis confirms that the hosting provider, Netlify, is a widely used static‑site service, which can be abused to host phishing pages due to its ease of deployment and legitimate TLS certificates. The presence on multiple blocklists and the detection by several anti‑phishing vendors suggests that the site is actively used in phishing campaigns, likely to collect user credentials.

Defenders should add moonshot-listing-8mh.netlify.app to URL filtering policies, block the associated IP 63.176.8.218 at network perimeters, and monitor for any related Netlify subdomains that resolve to the same address. Continuous ingestion of threat‑intel feeds that reference the three blocklists and the vendors that flagged the domain will help maintain updated protection. Until a detailed page‑content analysis becomes available, the recommendation is to treat any traffic to this domain as malicious and to educate users about the risk of credential‑harvesting sites hosted on generic cloud platforms.