moonxshot[.]xyz

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Celer, a known blockchain interoperability platform. Analysis indicates the site was designed to deceive users by mimicking Celer’s branding, likely to facilitate fraudulent activities such as unauthorized token transfers or credential harvesting under the guise of a "Vote to List" campaign. The page title, "Vote to List — Powered by Moonshot," further suggests an attempt to lend legitimacy to the operation by associating it with a seemingly official process. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain moonxshot.xyz was registered on November 1, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other malicious infrastructure. Security vendors on VirusTotal flagged the domain at a rate of 7 out of 95, indicating moderate consensus on its malicious nature. Additionally, the domain appears on two security blocklists, and it has been proactively blocked by multiple threat intelligence platforms. The combination of recent registration, low-trust registrar, and active blocklisting underscores the domain’s suspicious nature. To mitigate risks associated with this brand impersonation threat, users should avoid interacting with moonxshot.xyz or any associated links. Organizations targeted by such impersonation campaigns should monitor for unauthorized transactions or credential submissions tied to this domain. Network-level protections, such as DNS filtering or IP blocking, should be implemented to prevent access to 188.114.96.3 and related infrastructure. Security teams are advised to review logs for connections to this IP or domain, particularly in environments where Celer-related activities are conducted. Proactive brand monitoring and user education on recognizing impersonation tactics are critical to reducing exposure to similar threats.