vote-colnmarkejcap[.]live

This domain is classified as a high-risk crypto wallet credential harvesting phishing site, designed to deceive users into disclosing sensitive authentication details for digital asset wallets. Analysis indicates the infrastructure was specifically engineered to mimic legitimate cryptocurrency platforms, with a focus on capturing private keys or recovery phrases through fraudulent login portals. Infrastructure analysis reveals the domain vote-colnmarkejcap.live was registered on June 8, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy. The domain appears on four security blocklists and has been documented in four AlienVault OTX threat intelligence pulses. Detection metrics show 14 out of 95 security vendors flagging the domain as malicious, with protective measures implemented by multiple threat intelligence platforms. To mitigate risks associated with this credential harvesting campaign, users should verify domain authenticity before entering wallet credentials, particularly when prompted by unsolicited links. Network-level protections should include blocking the domain and its resolving IP (188.114.96.3) at firewalls and DNS resolvers. Organizations should update security blocklists to include this domain and monitor for related infrastructure, such as similarly named domains registered through the same registrar. Wallet users are advised to enable multi-factor authentication and use hardware-based signing devices to reduce exposure to credential theft.