publicpepusunchained-portal[.]votings[.]workers[.]dev

publicpepusunchained-portal.votings.workers.dev was observed resolving to the Cloudflare edge address 104.21.27.200 located in the United States. The domain is hosted on Cloudflare infrastructure, using nameservers ns.cloudflare.com and ns2.cloudflare.com, and was registered through Cloudflare, Inc. HTTPS negotiation presents a Google Trust Services / WE1 certificate and the server advertises HSTS, HTTP/3, and other Cloudflare security features. An HTTP GET returns status 404 with the page title “Page not found”, indicating that the site is currently unavailable.

The domain has been flagged by the PhishDestroy blocklist and appears on a single external security blocklist. VirusTotal analysis shows that 6 of 95 scanned security vendors flagged the domain, supporting a malicious classification. No additional public intelligence such as Safe Browsing, OTX, or specific phishing kit details is available.

The combination of a dedicated Cloudflare‑hosted sub‑domain, a valid SSL certificate, and a recent phishing detection suggests the domain was used for a generic phishing campaign before being taken offline. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑registration or new activity on the associated IP address, and consider adding the domain to internal blocklists. Further investigation of any related URLs or email artifacts that reference this host is recommended to determine the scope of the original campaign.