play[.]moekex[.]com

The domain play.moekex.com is currently classified as an active generic phishing site with an elevated risk rating. It appears on a single security blocklist and is explicitly listed as blocked by the PhishDestroy service. VirusTotal submissions indicate that 12 of 91 scanned security vendors have flagged the domain as malicious, suggesting a moderate level of consensus among detection engines.

No additional infrastructure details such as registrar information, hosting IP, SSL certificate data, HTTP response codes, or Safe Browsing status are presently available in the intelligence feed, leaving the broader attack surface uncharacterized. The limited visibility means that attribution of the hosting provider, geographic location, or underlying phishing kit cannot be confirmed at this time. Defenders should prioritize immediate containment by adding play.moekex.com to outbound filtering rules and intrusion prevention lists, and ensure that any internal email gateways block links to the domain.

Continuous monitoring of blocklist updates and future VirusTotal scans is recommended to capture any changes in detection ratios or the emergence of new indicators such as redirects, payloads, or compromised credentials. Organizations should also consider threat‑intel sharing with peers to accelerate detection of related phishing campaigns that may reuse the same domain or similar naming patterns.