moonshot-listing-asm[.]netlify[.]app

The site at moonshot-listing-asm.netlify.app poses an impersonation threat by presenting itself as a "Vote to List — Powered by Moonshot" page. It is designed to mimic the legitimate Moonshot brand, likely to trick users into providing credentials, funds, or other sensitive information under the guise of a listing vote. This type of impersonation scam can lead to account compromise or financial loss.

Technical analysis reveals the site is flagged by 11 out of 95 VirusTotal vendors, including BitDefender, CyRadar, ESET, Emsisoft, and Forcepoint ThreatSeeker. It is hosted on IP 35.157.26.135 in Germany, belonging to AS16509 Amazon.com, Inc., and registered through Netlify. The SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), but nameservers are not found, indicating potential DNS misconfiguration or recent registration. The domain risk score is 100, and GridinSoft trust is 0 out of 100.

Currently, the site status is ACTIVE, meaning it remains accessible and operational. The 100 risk score and zero trust rating, combined with high detection rates and blocklist presence (3 blocklists), classify this as a high-severity threat. Immediate user caution is advised, as the site is actively used for brand impersonation and likely hosts malicious content.