moonshot-listing-zvy[.]netlify[.]app

This domain is flagged as a high-risk brand impersonation targeting Moonshot. The domain moonshot-listing-zvy.netlify.app was created on June 21, 2026, and resolved to IP address 18.208.88.157, hosted on Amazon.com, Inc. (AS14618) in the United States. The page title was 'Vote to List — Powered by Moonshot', indicating an attempt to mimic the Moonshot brand for deceptive purposes. Infrastructure analysis reveals the domain was registered through Netlify and utilized an SSL certificate issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1). The domain appeared on three security blocklists and was flagged by 15 of 91 security vendors on VirusTotal.

It was blocked by PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score was 0/100, reflecting high suspicion. The HTTP status returned 404, and the domain is currently offline as of the report date. Technologies detected include Netlify and HSTS.

The nameservers were not found (NS_NOT_FOUND), suggesting incomplete or misconfigured DNS records. While the exact content of the page is not analyzed, the combination of the brand-targeting page title, low trust score, multi-vendor flagging, and blocklist presence confirms this domain was used for brand impersonation. Defenders should ensure any users who may have interacted with this domain are alerted, and monitor for similar domains registered through Netlify targeting Moonshot. No additional scam category beyond brand impersonation is established from the available evidence.