moonshot-listing-364[.]netlify[.]app

Analysis date: August 07, 2026. The domain moonshot-listing-364.netlify.app is registered through Netlify, a cloud‑based platform that provides static site hosting and automatic HTTPS provisioning. DNS queries for the domain resolve exclusively to the IPv4 address 35.157.26.135, an address that resides within the Amazon Web Services (AWS) address space used by Netlify for edge delivery. The domain appears on a single external security blocklist and is actively listed by the PhishDestroy feed, which classifies it as a phishing‑related resource.

VirusTotal records indicate that the URL was submitted for analysis and examined by 91 distinct antivirus and URL‑reputation engines; none of the engines generated a detection at the time of the scan. While the lack of detections might suggest a low current payload, it does not mitigate the risk implied by the blocklist entries. No information on SSL certificate details, HTTP response status, page title, Safe Browsing verdict, Open Threat Exchange (OTX) tags, or trust‑score metrics is present in the provided intelligence, leaving those vectors unverified. Consequently, it is unclear whether the site serves content over HTTPS, what exact content is delivered, or whether additional reputation services have flagged the host.

Given the confirmed blocklist presence, the Netlify hosting context, and the observed IP address, the domain should be regarded as a confirmed phishing indicator. Defensive recommendations include: adding moonshot-listing-364.netlify.app to DNS‑based deny lists and web‑proxy block rules; enforcing network‑level blocks for the IP 35.157.26.135; monitoring outbound traffic for attempts to resolve or contact this host; and periodically re‑scanning the URL to capture any future detection changes. Organizations should also consider broader Netlify‑related threat monitoring, as attackers frequently leverage the platform’s free tier for rapid deployment of malicious pages.