vote-kirwan[.]org

This domain, vote-kirwan.org, is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. Registered on May 21, 2026, through NAMECHEAP INC, the domain resolves to IP address 64.239.109.1 and uses a Let's Encrypt SSL certificate. Infrastructure analysis reveals the site is hosted via Cloudflare and Bluehost, running WordPress with MySQL, PHP, Yoast SEO, jQuery Migrate, and jQuery. The page title is 'Vote Michael Kirwan for Congress,' but this should not be taken as verification of legitimacy. AlienVault OTX includes this domain in 16 threat intelligence pulses, and it appears on 4 security blocklists. It is blocked by SEAL, MetaMask, PhishDestroy, and BLP-Malware. VirusTotal reports 5 of 95 security vendors flagging the domain as malicious. Gridinsoft assigns a trust score of 0/100. The domain's recent creation, low trust rating, and inclusion in multiple threat intelligence feeds indicate a high probability of malicious intent. Defenders should block the domain at the network level, monitor for related subdomains or IPs, and warn users against interacting with the site. The exact phishing mechanism or targeted brand has not been confirmed, but the domain is likely used for credential harvesting or political donation fraud. No further details on the site's content or specific campaign are available at this time.