moonshot-listing-dug[.]netlify[.]app

This domain, moonshot-listing-dug.netlify.app, is actively engaged in brand impersonation targeting Moonshot, a recognized entity in the cryptocurrency or digital asset space. The site presents itself as a legitimate voting or listing platform under the guise of Moonshot, as evidenced by the page title 'Vote to List — Powered by Moonshot.' The domain remains operational as of the latest verification, posing a high-risk threat to users who may interact with it under false pretenses. Analysis indicates the domain is flagged by 15 of 95 security vendors on VirusTotal, a notable indicator of malicious activity. It resolves to the IP address 35.157.26.135, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in Germany. The domain is registered through Netlify, a platform commonly used for hosting static websites. It appears on three security blocklists and is currently blocked by at least three independent security mechanisms. The SSL certificate is issued by DigiCert Inc, specifically under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain, which does not mitigate the underlying malicious intent. The current status of moonshot-listing-dug.netlify.app is active, and the threat remains unmitigated. Organizations and users are advised to block the domain at the network level, including its resolving IP address, to prevent access. Security teams should update endpoint protection rules to flag interactions with this domain as high-risk. Users who may have visited the site should be instructed to verify their accounts and assets for unauthorized activity, particularly if any credentials or wallet interactions were performed. Monitoring for similar domains using the 'moonshot' brand name is recommended to preempt further impersonation attempts.