moonshot-listing-svs[.]netlify[.]app

This domain, moonshot-listing-svs.netlify.app, is identified as an active brand impersonation threat targeting Moonshot, a recognized entity in the cryptocurrency sector. The page title, 'Vote to List — Powered by Moonshot,' explicitly leverages the brand's identity to deceive users into engaging with fraudulent content, likely aimed at credential theft or unauthorized asset transfers. No explicit drainer kit signatures have been observed, but the social engineering tactics align with common cryptocurrency phishing methodologies. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 18.208.88.157, hosted on infrastructure belonging to AS16509 (Amazon.com, Inc.) in Germany. The domain is registered through Netlify, a legitimate hosting provider often exploited for rapid deployment of phishing pages. VirusTotal detection metrics indicate 10 out of 95 security vendors flag this domain as malicious. The domain appears on three independent security blocklists, including high-confidence feeds. The SSL certificate, issued by DigiCert Inc, is valid and does not exhibit anomalies, though this is a common tactic to lend false legitimacy to phishing pages. As of the latest assessment, the domain remains active and continues to pose a high risk to users. While some security providers have implemented blocks, the domain's accessibility persists due to its hosting on a reputable platform. Users are advised to exercise extreme caution when encountering this domain or similar URLs referencing Moonshot. Verification of official communication channels and direct navigation to verified platforms are recommended to mitigate exposure. The remaining risk is elevated due to the domain's active status, brand leverage, and low detection rates among certain security solutions.