moonshot-listing-yaz[.]netlify[.]app

moonshot-listing-yaz.netlify.app is actively impersonating the Moonshot brand to deceive users into engaging with a fraudulent token listing scheme. The domain, hosted on Netlify and detected by PhishDestroy on 2026-06-21, has already been flagged by one out of 91 vendors on VirusTotal as malicious. It is also listed on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL.

The site lures victims with the promise of voting for their token to get listed, a tactic aimed at cryptocurrency enthusiasts and investors. This fraudulent activity is hosted on an IP address registered to Amazon's AS16509 in Germany, with SSL certification issued by DigiCert Inc. The platform risk score for this domain is notably high at 83 out of 100, indicating a significant threat level.

Despite the low initial detection rate on VirusTotal, the domain's appearance on multiple blocklists and its specific targeting of the Moonshot brand underscore its malicious intent. The rapid identification by PhishDestroy highlights the importance of early detection systems that can identify threats before they propagate through traditional antivirus databases. This domain exemplifies the ongoing risks posed by phishing sites that exploit brand trust to execute scams.