network-vote[.]xyz

Analysis indicates that the domain network-vote.xyz was registered on June 06 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is delegated to the Cloudflare name servers celeste.ns.cloudflare.com and junade.ns.cloudflare.com. DNS resolution points to the IP address 104.21.8.254, which belongs to Cloudflare's globally distributed edge network and provides the domain with built‑in DDoS mitigation and anonymity. The domain is currently listed as active and appears on at least one security blocklist. PhishDestroy, a reputable anti‑phishing feed, has explicitly blocked network‑vote.xyz, confirming a direct association with phishing activity. VirusTotal records show that one out of ninety‑five scanning engines flagged the domain, adding an independent detection signal. No public page title, SSL certificate details, HTTP response code, Safe Browsing verdict, or Open Threat Exchange (OTX) entries are present in the supplied intelligence, leaving the exact content, transport security posture, and payload characteristics of the site unverified. The absence of these data points creates uncertainty regarding the specific phishing vector employed, but the combination of recent creation, Cloudflare hosting, active status, and confirmed blocklist entries classifies the domain as high‑risk. Defenders should treat network‑vote.xyz as malicious and enact preventative controls: add the domain to DNS‑based deny lists, enforce URL filtering in web proxies, monitor outbound connections to the 104.21.8.254 address, and consider sinkholing the IP range if feasible. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in detection status, and sharing the indicator with peer organizations will improve collective visibility against this emerging threat.