moonshot-listing-ay[.]netlify[.]app

Analysis of moonshot-listing-ay.netlify.app indicates that the domain is currently listed on a single security blocklist and has been actively blocked by the PhishDestroy filtering service. The domain was examined by VirusTotal, where 91 distinct scanning engines inspected the host; none of the engines returned a detection at the time of analysis. No public evidence of the site’s content, page title, SSL certificate details, or HTTP response codes has been disclosed, leaving the precise nature of the page unverified.

The classification of generic phishing derives from its appearance on phishing‑oriented blocklists rather than from observed credential‑theft behavior. Because the domain resolves to a Netlify‑hosted endpoint, it inherits the typical cloud‑service infrastructure, which may obscure the originating IP address and limit direct attribution. The risk level is marked as "under investigation" while the status remains active, suggesting that threat actors could be leveraging the site in ongoing campaigns.

Defenders should continue to enforce DNS‑level blocking for the domain, monitor inbound traffic for connections to the Netlify host, and incorporate the domain into existing phishing detection rules. Ongoing collection of page‑level telemetry, TLS certificate data, and any user‑reporting will be essential to refine the risk assessment and to determine whether the domain evolves into a more active malicious payload.