home[.]moekex[.]com

This domain, home.moekex.com, is actively flagged as a credential phishing site targeting users through deceptive login prompts. As of August 7, 2026, it appears on one security blocklist and is blocked by PhishDestroy. VirusTotal analysis indicates that 12 out of 91 security vendors detect the domain as malicious, though the specific nature of the threat—such as the targeted brand or phishing kit—remains unconfirmed due to limited available intelligence. Infrastructure analysis reveals the domain resolves to IP address 172.67.153.254, which may be part of a content delivery network or shared hosting environment, a common tactic to obscure the true origin of phishing infrastructure.

Defenders should treat this domain as an active threat with elevated risk. The detection by multiple security vendors and presence on a blocklist suggest it is actively used in phishing campaigns, though the exact content or brand impersonation has not been analyzed. Network-level blocking of the domain and its associated IP (172.67.153.254) is recommended for organizations.

Security teams should also monitor for related indicators, such as subdomains or URLs under home.moekex.com, which may be used in follow-up attacks. If additional context becomes available—such as the targeted brand or phishing kit—further granular blocking or alerting rules may be warranted. At this time, no registrar or hosting provider details have been confirmed, limiting attribution efforts.