usdai-votes[.]com

usdai-votes.com was registered on April 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted behind Cloudflare’s network (nameservers sydney.ns.cloudflare.com and zac.ns.cloudflare.com). The domain resolves to IP address 188.114.96.3, which is located in Canada and belongs to Cloudflare, Inc. TLS is provided by a Let’s Encrypt certificate (E8). An HTTP request returns a 403 status code and the page title is reported as “Just a moment…”, indicating that the front‑end is likely restricted by a challenge page.

VirusTotal analysis shows that 4 out of 95 security vendors have flagged the domain, and the site appears on three public blocklists. Gridinsoft assigns a trust score of 0 out of 100, and the domain is actively blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists the domain in a single threat‑intelligence pulse, reinforcing its classification as a high‑risk generic phishing infrastructure.

The available intelligence does not reveal the specific brand or service being spoofed; the only observable artifact is the generic page title. Consequently, the exact malicious payload or credential‑harvesting mechanism remains unknown. The 403 response suggests that the site may be serving a Cloudflare challenge or deliberately restricting access to automated scanners, which can hinder automated detection but does not diminish the observed malicious reputation.

Defenders should add usdai-votes.com to URL and domain blocklists across perimeter firewalls, secure web gateways, and DNS filtering solutions. Traffic to the associated IP address 188.114.96.3 should be denied or redirected to a sinkhole. Continuous monitoring of Cloudflare‑originated traffic for anomalous patterns is advised, and any credential submissions intercepted from internal users should be treated as compromised. Incident response teams should also correlate logs for attempts to reach this domain and consider notifying affected users if credential exposure is suspected.