moonshot-listing-np[.]netlify[.]app

Analysis of moonshot-listing-np.netlify.app indicates that the site is actively being used for phishing operations. The domain has been intercepted by the PhishDestroy mitigation service, which reports that traffic to the host is being blocked. VirusTotal scans show that four out of ninety‑one antivirus and URL‑reputation engines have raised a detection, confirming that at least a minority of security products recognize malicious behavior associated with the domain. Additionally, the site appears on a single public security blocklist, reinforcing the view that it is considered hostile by an external threat‑intelligence feed.

The risk rating assigned to the domain is elevated, reflecting the potential impact of credential harvesting that typical phishing campaigns aim to achieve, and the status is listed as active. The unique seed 053005 links this observation to a broader collection of related indicators, facilitating correlation with other compromised assets that may share infrastructure. Publicly available metadata beyond the blocklist entry is limited; no registrar, creation date, hosting IP, SSL certificate, Safe Browsing status, page title, or content has been disclosed, leaving the exact phishing lure and targeted brand unknown. The modest detection count suggests that the campaign may be in an early stage or that the payload is tailored to evade broader detection, but the presence on a dedicated phishing blocklist demonstrates that the infrastructure has already attracted defensive attention.

Defenders should treat the domain as malicious and enact preventative controls. Recommended actions include adding moonshot-listing-np.netlify.app to DNS‑based deny lists, configuring web‑proxy rules to block HTTP(S) requests to the host, and ensuring that endpoint protection suites are updated to incorporate the latest VirusTotal signatures. Continuous monitoring of DNS query logs for look‑ups to the domain will help detect any lingering or repeat activity.