moonshot-listing-ett[.]netlify[.]app

This domain, moonshot-listing-ett.netlify.app, poses a high-risk brand impersonation threat targeting Moonshot, a recognized entity in the cryptocurrency or digital asset space. The site presents itself as an official voting or listing platform under the guise of Moonshot, using the page title 'Vote to List — Powered by Moonshot.' Such impersonation attempts are designed to deceive users into believing they are interacting with a legitimate service, potentially leading to credential theft, financial fraud, or unauthorized access to sensitive accounts. The domain exploits trust in the Moonshot brand to manipulate users into submitting personal information or engaging in transactions under false pretenses. Analysis indicates this domain is actively malicious, with 12 out of 95 security vendors on VirusTotal flagging it as harmful. The domain is registered through Netlify, a legitimate hosting platform often abused for deploying phishing pages due to its ease of use and free tier. Infrastructure analysis reveals the domain resolves to the IP address 98.84.224.111, located in Germany and associated with Amazon.com, Inc. (AS16509). The SSL certificate, issued by DigiCert Inc, does not mitigate the risk, as attackers frequently use valid certificates to lend credibility to fraudulent sites. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further confirming its malicious intent. Users who have visited moonshot-listing-ett.netlify.app should take immediate action to mitigate potential risks. If any credentials, financial details, or personal information were entered on the site, these should be considered compromised and changed immediately across all platforms where the same credentials were used. Monitor accounts linked to the submitted information for unauthorized activity, such as login attempts, transactions, or changes to account settings. Enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. If cryptocurrency or digital assets were involved, report the incident to the relevant platform and consider consulting a cybersecurity professional to assess potential financial exposure. Additionally, scan the device used to access the domain for malware or unauthorized software, as phishing sites may deploy malicious payloads.