vote-moltbook[.]com

The domain vote-moltbook.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently listed as offline. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., placing the host in the United States. The authoritative name servers are arnold.ns.cloudflare.com and liz.ns.cloudflare.com, both operated by Cloudflare. The site advertised the page title “moltbook – the front page of the agent internet”, but no SSL certificate was observed, indicating that HTTPS was not enforced despite the presence of HSTS and HTTP/3 support reported by the scanning infrastructure. Cloudflare Browser Insights and other Cloudflare services are active, suggesting the attacker leveraged the provider’s free tier for rapid deployment.

Reputation signals are strongly negative. Gridinsoft assigned a trust score of 0 / 100. VirusTotal recorded six detections out of ninety‑three scanned engines, and the domain appears on three public blocklists. Independent anti‑phishing feeds, including PhishDestroy, MetaMask, and SEAL, have already blocked the domain. The lack of a valid TLS certificate combined with the low trust score and multiple vendor detections points to a malicious intent, consistent with the generic phishing classification.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanism because the page content has not been captured. No additional infrastructure, such as command‑and‑control servers or malware hashes, has been linked to the domain in the available data. Defenders should continue to block vote-moltbook.com at DNS and proxy layers, monitor for any resurgence of the domain, and consider adding the associated IP address 188.114.97.3 to threat‑intel watchlists. Further analysis of any future redirects or content served from this host would be required to fully map the phishing campaign’s scope.