moonshot-votingreward[.]pages[.]dev

This domain, moonshot-votingreward.pages.dev, is actively engaged in brand impersonation targeting the celer network. The site presents itself as a voting rewards platform under the guise of legitimacy, using the page title "Vote to Earn — Powered by Moonshot" to deceive users. Current analysis confirms the domain remains operational and unmitigated at the time of this report. Infrastructure analysis reveals the domain is flagged by 10 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It is registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, hosted on AS13335 within the United States. The domain was created on March 14, 2026, and is currently listed on four distinct security blocklists. Additional technical indicators include an SSL certificate identifier E8 and active blocking by multiple transaction monitoring systems. The domain remains active and poses a high risk to users, particularly those interacting with celer-related services. Immediate mitigation steps are recommended, including the addition of this domain to enterprise blocklists, user education on recognizing brand impersonation tactics, and monitoring for associated wallet drainer activity. Network defenders should prioritize this domain for takedown requests and correlate its infrastructure with other known malicious campaigns.