moonshot-listing-xya[.]netlify[.]app

moonshot-listing-xya.netlify.app is a tenant hostname on Netlify, not a separately registered domain. PhishDestroy first observed the hostname on Jul 31, 2026. The hostname explicitly references Moonshot and uses “listing,” a pattern consistent with a token-listing lure; stored content metadata identifies the same apparent target. Current evidence score: 66/100 (high).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 2 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Aug 12, 2026 at 04:30 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 18, 2026 at 02:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 12, 2026 at 04:30 UTC.

No conclusive timestamped HTTP response is stored. Netlify is the hosting platform for this tenant, not its registrar. The platform TLS certificate was issued by DigiCert Inc.

Neither a page title nor a landing-page capture is stored. The content indicators and 3 positive source findings support the current Moonshot-themed token-listing phishing classification. The target field identifies Moonshot, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.