movement-votereward[.]xyz

The domain movement-votereward.xyz was registered on June 09, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Active resolution points to the IP address 104.21.34.240, which is hosted on a cloud service provider commonly used for short‑lived malicious infrastructure. Independent threat‑intel feeds have placed the domain on three security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple anti‑phishing solutions have already identified it as malicious.

VirusTotal analysis shows five of ninety‑one scanners flag the domain, providing additional corroboration of its hostile nature. The current risk rating is elevated, and the threat type is identified as generic phishing, though no further detail about the lure or targeted brand is available from the collected metadata. No information about SSL certificates, HTTP response codes, page title, or Safe Browsing verdicts has been published, leaving the exact content of the site unverified.

Defenders should add movement‑votereward.xyz to DNS‑based blocklists, enforce URL filtering policies that deny traffic to the resolved IP 104.21.34.240, and monitor for any outbound connections from internal hosts to that address. Continuous re‑scanning on VirusTotal and integration with any emerging blocklist updates are recommended to capture changes in the domain’s reputation. Because the domain is newly created and already flagged, early containment is advisable to prevent credential harvesting or other phishing‑related compromise.