xn--monshot-3mb[.]net

This domain, xn--monshot-3mb.net, poses an elevated risk by impersonating the Celer brand to deceive users into interacting with fraudulent content. The site displays a page titled 'Vote to List — Powered by Moonshot,' which may trick visitors into believing they are participating in a legitimate community vote or token listing process. Such tactics are commonly used to harvest sensitive information, distribute malicious payloads, or redirect users to crypto drainers, particularly in blockchain and decentralized finance ecosystems. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.181.106 and is flagged by 4 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on two security blocklists and is actively blocked by multiple detection systems, including ScamSniffer and PhishDestroy, further confirming its malicious intent. Users who visited xn--monshot-3mb.net should immediately disconnect any wallets or accounts linked to the site and revoke any active permissions granted. Monitor financial and personal accounts for unauthorized activity, and consider running a full system scan using updated security tools. If credentials were entered, change passwords for all associated accounts, prioritizing those tied to cryptocurrency wallets or sensitive platforms. Report the domain to relevant security communities or incident response teams to aid in broader mitigation efforts.