unipeg-vote[.]app

This domain, unipeg-vote.app, was registered on May 24, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently active with a high-risk classification for generic phishing. Infrastructure analysis reveals the domain resolves to 188.114.97.3, a Cloudflare IP address located in Canada, and uses Cloudflare nameservers (howard.ns.cloudflare.com, shubhi.ns.cloudflare.com). The SSL certificate is issued by Let's Encrypt (E7). At the time of assessment, the domain returns an HTTP 403 status with the page title 'Just a moment...', which is consistent with Cloudflare interstitial pages or access restrictions, though the underlying content remains unconfirmed. The domain appears on three security blocklists and has been referenced in four AlienVault OTX threat intelligence pulses, indicating prior detection by security communities. VirusTotal reports six out of 91 security vendors flagging the domain, though the specific detection logic is not detailed. No brand, scam kit, or targeted sector is explicitly identified in available intelligence, and the exact phishing mechanism remains unanalyzed due to restricted access. Defenders should treat this domain as actively malicious and prioritize blocking at DNS, proxy, or endpoint levels. Given its Cloudflare hosting, additional scrutiny of related domains using the same nameservers or IP range may reveal connected infrastructure. If internal logs show any connections to this domain, investigate for credential theft, malware delivery, or lateral movement. The domain's recent registration and ongoing activity suggest it may be part of a larger campaign, warranting monitoring for new subdomains or redirects.