moonshot-listing-w4v[.]netlify[.]app

Analysis of moonshot-listing-w4v.netlify.app shows that the domain is actively flagged by the PhishDestroy blocklist and resolves to the IPv4 address 35.157.26.135. The hosting service is Netlify, as indicated by the registrar information, which is consistent with the deployment of many short‑lived malicious sites. VirusTotal reports that the domain was scanned by 91 independent vendors; none of the scanners raised a detection at the time of the scan. Although the lack of detections does not constitute a safety guarantee, the presence on a dedicated phishing blocklist confirms that the domain has been used in malicious campaigns.

The domain appears on one additional security blocklist, reinforcing the likelihood of abuse. No public SSL certificate details, HTTP status codes, or page title information are currently available, limiting the depth of surface‑level inspection. Consequently, the primary evidence consists of blocklist inclusion, hosting attribution, and the IP address association. Defenders should treat the domain as high‑risk and enforce network‑level blocking or sink‑hole routing for any traffic destined to it.

Continuous monitoring of the IP address 35.157.26.135 for new associations is advisable, as Netlify infrastructure can host multiple unrelated sites. Organizations employing web filtering should add the domain to their deny lists and consider reporting any observed activity to threat‑sharing platforms. Given the limited public metadata, further investigation—such as retrieving the live page content, examining TLS certificates, and checking safe‑browsing APIs—would be required to refine the risk assessment, but current indicators already justify preventive controls.