votme[.]top

This domain, votme.top, was identified as a generic phishing infrastructure active as of July 25, 2026. Registered on March 23, 2026, through Spaceship, Inc., the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare, Inc. in Canada. The HTTP status returned is 200, indicating an accessible resource, though the domain is currently offline. The page title, 'Application placeholder,' suggests the site may have been intended to host a fraudulent application or form, though the exact content or target remains unconfirmed due to the lack of further analysis.

Infrastructure analysis reveals the use of Cloudflare nameservers (jim.ns.cloudflare.com and maleah.ns.cloudflare.com) and an SSL certificate issued by Let's Encrypt (E8). Detected technologies include PHP, Ubuntu, Cloudflare Browser Insights, and HTTP/3. The domain holds a Gridinsoft trust score of 0/100 and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. One of 94 security vendors on VirusTotal flags this domain, though the specific detection context is not provided.

Defenders should note that the domain's association with Cloudflare hosting and its presence on multiple blocklists indicate a likely malicious purpose. The lack of a confirmed brand target or phishing kit limits further attribution, but the infrastructure aligns with typical phishing operations. Organizations are advised to block this domain at the network level, monitor for related indicators of compromise, and review logs for any prior connections to the IP or domain. Given its current offline status, further investigation may be required if the domain reactivates.