moonshot-listing-pgd[.]netlify[.]app

This domain, moonshot-listing-pgd.netlify.app, poses a high-risk brand impersonation threat designed to deceive users into believing it is affiliated with Moonshot, a legitimate platform. The site displays the title 'Vote to List — Powered by Moonshot,' mimicking official branding to trick visitors into engaging with fraudulent content. Such impersonation schemes often aim to harvest credentials, distribute malware, or facilitate financial fraud by exploiting trust in the targeted brand. Users may be lured into submitting sensitive information or interacting with malicious elements under the false pretense of participating in a legitimate process, such as voting or listing activities. Analysis indicates that the domain is flagged by 11 out of 95 security vendors on VirusTotal, a significant indicator of malicious activity. It is registered through Netlify, a platform commonly used for hosting both legitimate and fraudulent sites, and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain resolves to the IP address 18.208.88.157, located in Germany under Amazon.com, Inc.'s AS16509. The SSL certificate, issued by DigiCert Inc, does not mitigate the risk, as fraudulent sites frequently use valid certificates to appear legitimate. The domain remains active, increasing the urgency for users to exercise caution. If you have visited moonshot-listing-pgd.netlify.app or interacted with its content, immediate action is recommended. Disconnect from the site and avoid providing any personal or financial information. Scan your device for malware using updated security tools to detect potential infections. Review recent transactions or account activity for unauthorized changes, particularly if you entered credentials or connected a wallet. Report the domain to relevant security teams or platforms to aid in its takedown and prevent further victimization. Users should also enable multi-factor authentication on critical accounts to reduce the risk of unauthorized access resulting from potential credential theft.