yeifi-votings[.]pages[.]dev

Analysis of yeifi-votings.pages.dev indicates the domain is actively hosting content, returning HTTP 200 responses. DNS resolution points to IP 188.114.97.3, a Cloudflare edge node located in Canada and associated with Cloudflare Pages hosting. The site presents a valid TLS certificate issued by Google Trust Services under the WE1 root, confirming encrypted transport but not validating the legitimacy of the content. Four of ninety‑one VirusTotal scanners have flagged the domain, suggesting malicious behavior detected by a minority of vendors. The domain is listed on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing a consensus of high risk. Registration through Cloudflare Pages further obscures ownership details, limiting attribution. No public page content, target brand, or phishing kit details have been disclosed, leaving the specific luring technique unknown. Defenders should treat the domain as hostile: block the FQDN and its resolved IP at the network perimeter, incorporate it into DNS‑based filtering feeds, and monitor outbound connections for attempts to contact the address. Continuous re‑scanning is advised to capture any changes in payload or additional vendor detections.