community-listing[.]cc

Analysis of the domain community-listing.cc indicates an active phishing campaign targeting users through brand impersonation, specifically leveraging the name 'Moonshot' as referenced in the page title 'Vote to List — Powered by Moonshot.' The domain was registered on June 5, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 188.114.96.3, associated with AS13335 (Cloudflare, Inc.). Infrastructure analysis reveals the use of Cloudflare nameservers (tara.ns.cloudflare.com and terin.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are common in both legitimate and malicious deployments. Technologies detected on the domain include WebAssembly, React, Alibaba Cloud Object Storage Service, ThreatMetrix, OneTrust, Naver Analytics, HSTS, and Google Tag Manager. While these technologies are not inherently malicious, their presence in this context suggests an attempt to create a polished, credible facade for phishing purposes. The domain has been flagged by three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a high-risk threat. As of July 12, 2026, the domain remains operational, returning an HTTP 200 status code. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. Defenders should prioritize blocking this domain at the network level, particularly given its association with brand impersonation. Monitoring for additional domains registered through the same registrar or resolving to the same IP may help identify related infrastructure. The exact content and functionality of the site have not yet been analyzed, so further investigation is recommended to determine the full scope of the phishing mechanism.