moonshot-listing-ady[.]netlify[.]app

Analysis of moonshot-listing-ady.netlify.app shows that the domain is registered through Netlify and resolves to the single IPv4 address 63.176.8.218, indicating use of Netlify's shared hosting infrastructure. The domain is listed on one security blocklist and is actively blocked by the PhishDestroy service, which suggests that external threat intelligence sources have observed malicious activity associated with this host. VirusTotal records indicate that the site has been scanned by 91 antivirus and URL‑reputation vendors, none of which returned a detection at the time of the scan; this absence of detections should not be interpreted as evidence of legitimacy, but rather as a lack of current signatures matching the observed payload.

No public information on SSL certificate anomalies, HTTP status codes, or page title has been released, and the actual content of the site remains unverified in the available data set. Consequently, the precise brand or service being impersonated cannot be confirmed, and the phishing vector (e.g., credential harvesting, malicious download) is not yet categorized. Defenders should treat the domain as hostile: add the hostname and its resolved IP address to DNS sinkhole or firewall deny lists, ensure that web‑proxy and secure web‑gateway solutions block access, and monitor outbound traffic for any connections to the Netlify IP range that could indicate exfiltration attempts.

Continuous re‑scanning with VirusTotal or similar multi‑engine platforms is advised, as additional detections may surface with updated signatures. Organizations should also educate users about unsolicited communications that may reference the domain, reinforcing standard phishing‑mitigation practices. Given the current evidence, the domain remains active and under investigation, and proactive containment is recommended.