moonshot-listing-den[.]netlify[.]app

moonshot-listing-den.netlify.app poses a significant threat by impersonating Moonshot, a popular platform for cryptocurrency token listings. This domain is flagged as malicious by 12 out of 91 vendors on VirusTotal, indicating widespread recognition of its fraudulent activities. The site remains active and is hosted on infrastructure associated with Amazon.com, Inc. in Germany.

The phishing operation exploits the allure of token listings, enticing users to vote for their tokens under the guise of Moonshot's brand. The page title, 'Moonshot – Vote your token to get listed!', suggests a legitimate service but is, in fact, a scam designed to harvest sensitive information from unsuspecting users. The platform's risk score is a perfect 100/100, underscoring the high likelihood of malicious intent.

Despite the active detection by several security vendors, the domain is still operational. It is included in public blocklists from PhishDestroy, MetaMask, and SEAL, reflecting the concerted effort to mitigate its impact. The site employs an SSL certificate issued by DigiCert Inc, which may falsely assure users of its legitimacy. This case highlights the ongoing challenge of phishing domains exploiting brand trust to deceive users.