votify-xaman[.]info
Analysis of votify-xaman.info indicates that the domain was registered on July 15 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are jill.ns.cloudflare.com and titan.ns.cloudflare.com, pointing to Cloudflare's DNS service. DNS resolution returns a single IPv4 address, 188.114.97.3, which is the current hosting endpoint. The domain appears on one public blocklist and has been added to the PhishDestroy blocklist, confirming that at least one sinkhole provider has taken mitigation action. VirusTotal records show the domain was submitted to 91 scanning engines; none of the engines raised a detection at the time of the scan.
The absence of detections does not imply safety, as the payload or page content may not have been captured. The domain is still active as of the report date, August 07 2026, and no evidence of takedown or DNS change has been observed. Given the limited publicly available telemetry, the primary indicators are the registration date, the Cloudflare‑hosted infrastructure, and the single IPv4 address. No SSL certificate details, HTTP response codes, page title, or content hashes have been published, so the exact phishing landing page cannot be described.
Defenders should consider adding 188.114.97.3 to network‑level deny lists, enforce DNS filtering for votify-xaman.info, and monitor for any new activity linked to the Cloudflare nameservers. Continuous re‑scanning on VirusTotal or similar platforms is recommended, as future analysis may reveal malicious payloads. Organizations should also review email gateway logs for references to the domain and block any messages that contain URLs pointing to it. The investigation remains open, and further evidence may emerge from traffic analysis or sandbox execution of any downloaded content.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidenceCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of votify-xaman.info · checked Aug 7, 2026
Evidence & External Reports
PD-20260807-DEBA51 Recipient: abuse@publicdomainregistry.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive