mvotehub[.]fun

As of July 22, 2026, the domain mvotehub.fun has been identified as a brand impersonation threat targeting the Moonshot brand. The domain was created on March 04, 2026, and currently resolves to the IP address 104.21.38.199, which is hosted by Cloudflare, Inc. in the United States. The domain does not have an SSL certificate, which is a common indicator of a non-secure site and could be a red flag for users. The page title found is 'Vote to List — Powered by Moonshot', suggesting that the site was designed to mimic official Moonshot services, possibly to trick users into believing they are interacting with a legitimate platform. The domain has been flagged by multiple security vendors, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, and is listed on four security blocklists.

This indicates a high level of suspicion among the cybersecurity community. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, with nameservers ada.ns.cloudflare.com and eric.ns.cloudflare.com. The lack of an SSL certificate and the presence of multiple blocklist entries suggest that the site was not designed with user security in mind. While the domain is currently offline, the infrastructure and registration details provide valuable insights into the threat. The elevated risk level and specific targeting of the Moonshot brand indicate that this domain was likely part of a coordinated effort to defraud users or collect sensitive information.

Defenders and users should remain vigilant and ensure that any links or communications related to Moonshot are verified through official channels. The offline status of the domain is a positive development, but it is crucial to monitor for any potential revivals or similar domain registrations. Users and organizations should also be aware of the potential for similar domains to be used in future campaigns.