moonshot-votelist[.]com

Analysis of moonshot-votelist.com confirms it as an active phishing domain targeting the Celer brand, classified under brand impersonation with a high-risk rating. The domain was registered on October 22, 2025, through NameCheap, Inc., and currently resolves to IP address 198.54.115.120. It is flagged by multiple security sources, including PhishDestroy and BLP-Malware, and appears on at least two security blocklists. The page title, 'Moonshot - Vote to list,' suggests an attempt to lure users into a fraudulent voting or listing scheme, likely exploiting Celer's reputation in the blockchain or cryptocurrency space. The domain has a Gridinsoft trust score of 0/100, and AlienVault OTX records it in 23 threat intelligence pulses, indicating widespread detection in the security community. Three of 95 security vendors on VirusTotal have flagged the domain, though this number may not reflect its full risk profile. The SSL certificate is issued by Sectigo Limited, a common provider for both legitimate and malicious domains, offering no definitive indication of intent. Defenders should treat this domain as hostile infrastructure. Recommended actions include blocking the domain and its resolving IP at network and endpoint levels, monitoring for related domains registered under the same registrar or hosting provider, and alerting users to the impersonation of Celer. The exact mechanics of the phishing operation remain unconfirmed, as the site's content has not been fully analyzed, but the combination of brand impersonation, recent registration, and security vendor detections warrants immediate mitigation.