moonshot-listing-sjq[.]netlify[.]app

The domain moonshot-listing-sjq.netlify.app has been classified as a high-risk brand impersonation threat targeting the brand Moonshot. Its active status and the nature of the impersonation suggest an ongoing risk to users who may mistake it for the legitimate Moonshot platform.

Technical analysis reveals that the domain is currently registered through Netlify and resolves to the IP address 63.176.8.218, which is located in Germany under AS16509, associated with Amazon.com, Inc. The domain has been flagged by 1 out of 95 security vendors on VirusTotal, indicating a low detection rate among security tools. Additionally, it appears on three known security blocklists, and has been blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1, which may lend a false sense of security to unsuspecting users.

To mitigate risks associated with this brand impersonation threat, users should be advised to verify the authenticity of any communication related to Moonshot before engaging with the domain. Organizations should implement domain monitoring and educate users about the indicators of brand impersonation. Furthermore, blocking access to the domain at the network level and reporting it to relevant authorities or security platforms could help reduce its potential impact.