moonshot-listing-dyn[.]netlify[.]app

The domain moonshot-listing-dyn.netlify.app is currently classified as an active generic phishing infrastructure with an elevated risk rating. Infrastructure analysis shows that the hostname resolves to the IPv4 address 35.157.26.135, which is hosted on the Netlify platform. The domain has been added to a single security blocklist and is explicitly blocked by the PhishDestroy mitigation service.

VirusTotal observations indicate that six of ninety‑one scanned security vendors have flagged the domain as malicious, reinforcing the suspicion of malicious intent. No additional intelligence such as page title, brand impersonation, or SSL certificate details is publicly available at this time, leaving the exact phishing lure undefined. The limited detection surface suggests that the actor may be leveraging a short‑lived or low‑profile hosting setup to evade broader detection.

Defenders should continue to block the domain at network perimeter devices, update DNS filtering policies to deny resolutions to 35.157.26.135, and monitor for any related traffic patterns. Organizations using threat‑intel feeds should ingest the seed identifier e4c753 to correlate future indicators of compromise. Ongoing observation of the domain’s status on blocklists and VirusTotal scans is recommended to detect any escalation in detection counts or the emergence of additional malicious payloads.