vote-libertyswap[.]com

Analysis of vote-libertyswap.com indicates that the domain was registered on June 12, 2026 through the HOSTINGER operations, UAB registrar. The domain resolves to the IPv4 address 172.67.156.159, which is hosted on a cloud service commonly used for rapid deployment of phishing infrastructure. Reputation checks show that the domain is listed on three independent security blocklists, and it has been actively blocked by PhishDestroy, MetaMask, and SEAL anti‑phishing filters.

VirusTotal scans report that five of ninety‑one antivirus and URL scanning engines returned a malicious classification for the domain, reinforcing the suspicion of phishing use. No additional metadata such as SSL certificate details, HTTP response codes, or page title information is available in the current intelligence set, leaving the exact content of the landing page unverified. The limited visibility does not alter the overall risk assessment, which remains elevated due to the combination of recent creation, hosting on a shared cloud IP, multiple blocklist entries, and vendor detections.

Defenders are advised to add vote-libertyswap.com to network and endpoint deny lists, enforce DNS‑based blocking, and monitor for any traffic to the associated IP address. Continuous re‑scanning through VirusTotal or similar services is recommended to capture potential changes in the payload or hosting configuration. Organizations that rely on MetaMask or other cryptocurrency wallets should ensure that their wallet extensions enforce domain verification and that users are educated about unsolicited requests originating from newly created domains.