moonshot-listing-fk[.]netlify[.]app

Analysis of the domain moonshot-listing-fk.netlify.app, registered under the Netlify platform, indicates active phishing infrastructure as of August 4, 2026. The domain is currently classified as a generic phishing threat, though specific impersonation targets or scam mechanics remain unconfirmed due to limited public intelligence. Infrastructure checks reveal the domain is hosted on Netlify's content delivery network, a common vector for phishing pages due to its free hosting and SSL capabilities. At the time of reporting, the domain appears on one security blocklist and is blocked by PhishDestroy, though it has not been flagged by any of the 91 vendors in the most recent VirusTotal scan.

The absence of detections in VirusTotal does not confirm safety, as phishing domains often evade initial scans through obfuscation or delayed malicious payloads. The domain's HTTP status, SSL certificate validity, and hosting provider (Netlify) align with typical phishing patterns, where legitimate services are exploited to lend credibility. No registrar details or autonomous system number (ASN) have been publicly linked to this specific subdomain, as Netlify manages the underlying infrastructure. The page title and exact content remain unanalyzed, preventing confirmation of whether it mimics a specific brand, login portal, or fraudulent listing service.

Defenders are advised to treat the domain as high-risk until further analysis confirms its purpose or takedown. Monitoring for changes in detection status, blocklist additions, or shifts in hosting behavior is recommended. Organizations should consider preemptive blocking based on the current blocklist and PhishDestroy classifications, particularly if the domain aligns with internal threat models for phishing or credential harvesting.