vibes-vote[.]com

Analysis of vibes-vote.com indicates a generic phishing domain registered on February 21, 2026, through Web Commerce Communications Limited. The domain is currently offline, returning a Cloudflare 522 connection timeout error, which suggests it may have been taken down or suspended. Infrastructure analysis reveals the domain resolves to IP 104.21.91.141, hosted on Cloudflare's network (AS13335), a common proxy service used to obscure malicious infrastructure. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the domain's malicious classification.

The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is assigned a Gridinsoft trust score of 0/100, reinforcing its classification as high-risk. Five of 95 security vendors on VirusTotal flagged the domain as malicious, though the specific nature of the phishing campaign remains unconfirmed due to the lack of accessible content. The page title, 'vibes-vote.com | 522: Connection timed out,' provides no additional context about the intended target or scam type. Defenders should treat this domain as compromised and block it at the DNS and network levels.

The use of Cloudflare nameservers (kehlani.ns.cloudflare.com, nile.ns.cloudflare.com) and HTTP/3 technology aligns with common phishing tactics to evade detection and maintain operational resilience. Given its offline status, monitoring for reactivation or associated domains with similar naming patterns (e.g., 'vibes-*' or 'vote-*') is recommended. No brand impersonation or specific scam category has been confirmed from the available evidence.