m-vote[.]sbs

This domain, m-vote.sbs, is actively hosting a generic phishing page designed to impersonate a MAX-branded voting portal. The threat type is classified as a fraudulent voting or survey scam, likely targeting users under the pretense of participation in a legitimate event. As of the latest verification, the domain remains operational and continues to resolve to its hosting infrastructure. Analysis of the domain reveals multiple high-risk indicators. The domain was registered on May 21, 2026, through Global Domain Group LLC, a registrar frequently associated with suspicious registrations. It resolves to the IP address 94.103.188.26, hosted by Alexhost SRL in Moldova, a provider known for harboring malicious activity. Security vendors on VirusTotal have flagged the domain, with 5 out of 95 engines detecting it as malicious. Additionally, the domain appears on three distinct security blocklists, further corroborating its malicious nature. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. The current status of m-vote.sbs remains active, posing an ongoing risk to users who may encounter it through phishing campaigns or malicious redirects. Organizations and individuals are advised to block the domain and its associated IP address at the network perimeter. Endpoint protection solutions should be updated to include this domain in their deny lists. Users who may have interacted with the site should verify their accounts for unauthorized activity and reset credentials if exposure is suspected. Monitoring for related infrastructure, such as subdomains or newly registered lookalike domains, is recommended to preempt further compromise attempts.