vote-peace[.]fun

The domain vote-peace.fun has been identified as a high-risk cryptocurrency phishing site designed to deceive users into submitting wallet credentials through a fraudulent token-voting interface. Analysis of the page title, 'Pump | Voting,' suggests an attempt to impersonate legitimate decentralized governance platforms, likely targeting users of blockchain-based voting systems or token holders seeking to participate in community decisions. The site is currently offline, but prior activity indicates a focus on credential harvesting through web-based forms. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on March 15, 2026, and resolves to the IP address 188.114.97.3. Security vendor detections include 15 of 95 flags on VirusTotal, while the Gridinsoft trust score stands at 0/100. The domain appears on four security blocklists, including MetaMask and PhishDestroy, and employs technologies such as Node.js, Vue.js, Nuxt.js, and Cloudflare Browser Insights. The use of HTTP/3 and Cloudflare further complicates attribution and takedown efforts, as these tools are frequently leveraged to obscure malicious infrastructure. Current status indicates the domain has been taken offline, though the underlying threat persists due to the potential for re-deployment under alternate domains. Users are advised to verify the authenticity of any cryptocurrency voting platform by cross-referencing official project documentation and confirming domain registration details through trusted sources. Wallet credentials should never be entered on unverified sites, and browser-based security extensions should be employed to block known phishing domains. Network administrators are recommended to implement DNS-based blocking for the IP 188.114.97.3 and monitor for related domains registered through the same registrar.