moonshot-listing-434[.]netlify[.]app

The domain moonshot-listing-434.netlify.app was observed on August 05, 2026 as an active malicious site classified as generic phishing. Infrastructure analysis shows the domain is hosted on Netlify's shared platform and resolves to the IPv4 address 63.176.8.218. The hosting provider is Netlify, which appears as the registrar in the WHOIS record. No authoritative nameserver records were returned (NS_NOT_FOUND), indicating that standard DNS delegation data is missing or obscured.

Threat‑intelligence feeds have added the domain to three public blocklists, and it is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. A VirusTotal scan performed by 91 antivirus engines returned no detections; however, the absence of detections does not constitute proof of safety. Because the site is flagged as generic phishing, the exact credential‑harvesting page content has not been publicly disclosed, and no page title, SSL/TLS fingerprint, or Safe Browsing verdict is available in the current data set. Consequently, analysts cannot confirm which brand or service the page attempts to mimic.

Defenders should continue to deny network connections to 63.176.8.218 and enforce DNS blocklisting for moonshot-listing-434.netlify.app. Monitoring of Netlify‑hosted domains for the sudden appearance of new subdomains is recommended. If logs show attempted HTTP(S) requests to this host, those sessions should be terminated and any credential data captured should be assumed compromised. Regular re‑scanning with multi‑engine services is advised, as threat actors may later introduce malicious payloads that trigger detections.