vote-hylo[.]xyz

The domain vote-hylo.xyz was registered on May 27 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare nameservers terin.ns.cloudflare.com and tara.ns.cloudflare.com. Security telemetry indicates that the site was used for a generic phishing campaign and was taken offline prior to the report date of July 22 2026. The domain appears on three independent security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services.

VirusTotal analysis records four of ninety‑one scanning engines flagging the domain as malicious, reinforcing the blocklist findings. The site’s current HTTP status is offline, preventing direct interaction, but its prior activity is corroborated by multiple vendor detections. No additional technical artefacts such as IP address, SSL certificate details, or page title have been disclosed, leaving those aspects unverified.

Defenders are advised to continue monitoring the domain on existing blocklists, ensure that any residual DNS entries are purged from internal resolvers, and maintain the applied filters from PhishDestroy, MetaMask, and SEAL. Because the domain is already offline, active mitigation is limited to preventing future resolution attempts and updating threat intelligence feeds with the observed registration and blocklist data. Ongoing observation of related registrars and similar naming patterns is recommended to catch potential re‑use of the same infrastructure.