moonshot-listing-yui[.]netlify[.]app

The domain moonshot-listing-yui.netlify.app is currently active and impersonates the Moonshot brand. It has been flagged as malicious by 13 out of 91 vendors on VirusTotal. This site is part of a phishing operation that attempts to deceive users into voting for tokens to get listed, a tactic aimed at exploiting the cryptocurrency community.

The domain is hosted on an IP address registered in Germany under Amazon's ASN, with SSL certification from DigiCert. This setup suggests a sophisticated attempt to appear legitimate and secure. The site has been included in public blocklists from PhishDestroy, MetaMask, and SEAL, indicating its recognition as a threat by multiple security entities.

Despite its recent detection by PhishDestroy on June 20, 2026, the domain has already achieved a high platform risk score of 100 out of 100. This reflects its potential for harm and its strategic targeting of cryptocurrency enthusiasts. The abuse score, however, is relatively low at 19 out of 100, which may suggest limited immediate impact or reporting.

The presence of 13 detections on VirusTotal highlights the domain's malicious nature, while its inclusion in blocklists underscores the importance of awareness and caution when dealing with such sites. This case exemplifies the ongoing risks posed by phishing domains, especially those exploiting popular brands like Moonshot to lure unsuspecting users into scams.