vote-kast[.]icu

PhishDestroy identifies vote-kast.icu as a newly launched generic phishing domain orchestrating an active credential harvesting campaign targeting unwitting internet users. The domain mimics a legitimate voting interface to trick victims into surrendering sensitive login credentials or personal information. No specific brand or drainer kit payload has been confirmed at this stage; however, the site exhibits classic phishing hallmarks including urgency-driven prompts and spoofed authentication forms. Security teams should treat the page as a high-fidelity mimic aimed at harvesting user data with minimal detection resistance.

Technical indicators confirm the domain’s malicious profile: VirusTotal currently flags the site with 0 / 95 detections and Google Safe Browsing has not yet blacklisted the URL. Domain registration occurred on April 22, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and the host resolves to IP address 188.114.96.3 using a Let’s Encrypt SSL certificate for added legitimacy. These attributes indicate a fresh, lightly abused infrastructure operated by opportunistic actors seeking to evade early detection.

As of today, the threat remains active and under continuous investigation; no permanent takedown actions have been recorded. Users are advised to block the domain at the network perimeter, inspect DNS logs for 188.114.96.3, and warn constituents against interacting with vote-kast.icu. Although the immediate risk is moderate given low VT coverage, the rapid registration date and SSL use suggest escalation potential; prompt blacklisting is recommended to curtail further victimization.