moonshot-listing-yab[.]netlify[.]app

moonshot-listing-yab.netlify.app is an active phishing site that impersonates the Moonshot brand. It attempts to lure users into voting for token listings, a tactic that preys on the cryptocurrency community's eagerness to see their tokens gain visibility. The site is currently flagged by 1 of 91 vendors on VirusTotal, indicating that it is still relatively fresh and may not yet be widely recognized by security databases.

This domain is hosted on an Amazon.com, Inc. IP address in Germany, with Netlify as the registrar and DigiCert Inc providing the SSL certificate. Despite its recent detection on June 20, 2026, by PhishDestroy, the site has already been added to public blocklists by PhishDestroy, MetaMask, and SEAL. The platform risk score is notably high at 83/100, suggesting significant potential for harm, while the abuse score remains low at 1/100, reflecting its newness and the limited number of reported incidents so far.

Phishing domains like moonshot-listing-yab.netlify.app exploit the critical 24-72 hour window between domain registration and the propagation of threat intelligence to antivirus databases. PhishDestroy's proactive monitoring captures such threats in this crucial period, providing an early warning system for potential victims. Users should be cautious of unsolicited requests to engage with cryptocurrency platforms, particularly those promising token listings or other financial incentives.