moonshot-listing-sgn[.]netlify[.]app

moonshot-listing-sgn.netlify.app is currently active, impersonating the Moonshot brand with the intent to deceive users into engaging with fraudulent token listing activities. The domain is flagged as malicious by 1 out of 91 vendors on VirusTotal, indicating a relatively low detection rate at this time. However, it is already on three public blocklists, including PhishDestroy, MetaMask, and SEAL.

The domain hosts a page titled 'Moonshot – Vote your token to get listed!' and operates under the registrar Netlify. It is hosted on an IP address associated with Amazon.com, Inc. in Germany, specifically under ASN AS16509. This infrastructure choice suggests a strategic attempt to leverage reputable hosting services to lend credibility to the scam.

PhishDestroy first identified this domain on June 21, 2026, highlighting its proactive detection capabilities. The platform risk score for this domain is notably high at 83/100, reflecting its potential threat level. The SSL certificate is issued by DigiCert Inc, which may be intended to further deceive users into believing the site is legitimate. The combination of early detection, low VirusTotal hits, and its presence on multiple blocklists underscores the importance of addressing this threat promptly.