moonshot-listing-hqu[.]netlify[.]app

Analysis of the domain moonshot-listing-hqu.netlify.app indicates it is currently under investigation for generic phishing activity as of August 06, 2026. The subdomain resolves to the IP address 63.176.8.218, which is associated with hosting infrastructure that may support malicious campaigns. At the time of this report, the domain appears on a single security blocklist, specifically PhishDestroy, suggesting early-stage detection by at least one vendor. No additional blocklist entries or widespread vendor detections are recorded, and the domain has not been flagged by the 91 security vendors that scanned it on VirusTotal.

The absence of detections does not confirm safety, as phishing domains often evade initial scans before being identified. Infrastructure analysis reveals the domain is hosted on Netlify, a legitimate platform frequently abused for phishing due to its free hosting services and ease of deployment. The registrar or registration details for the subdomain are not explicitly provided, but Netlify’s hosting environment is known to facilitate rapid domain setup, which threat actors exploit to launch short-lived campaigns. The HTTP status, SSL certificate validity, and page content have not been fully analyzed in this report, though defenders should note that phishing sites on Netlify often use valid SSL certificates to appear legitimate.

Given the domain’s presence on a security blocklist and its classification as an active threat, organizations are advised to treat moonshot-listing-hqu.netlify.app with caution. Network-level blocking or monitoring for connections to 63.176.8.218 may mitigate potential risks. Further investigation is required to determine the specific brand or service being impersonated, as no conclusive evidence of the target or phishing kit is currently available.