vote-psyopanime[.]xyz

This domain, vote-psyopanime.xyz, was registered through NameSilo, LLC on 21 February 2026. DNS resolution points to 188.114.96.3, an address owned by AS13335 Cloudflare, Inc. in the United States. The zone is served by Cloudflare nameservers (chance.ns.cloudflare.com, jean.ns.cloudflare.com) and presents HSTS, Cloudflare Browser Insights, and HTTP/3 support. The TLS handshake uses a certificate issued by Google Trust Services under the WE1 profile, a mismatch that often signals deliberate brand abuse. The site’s page title is reported as “Even geduld…”, but no further content has been captured.

Brand‑impersonation analysis shows the domain purports to imitate Google, and the associated phishing kit is identified as an “Airdrop Scam”. Reputation services assign a Gridinsoft trust score of 0 / 100, indicating extreme malicious confidence. VirusTotal scans returned 2 detections out of 93 scanners, and the domain is listed on two public blocklists, including PhishDestroy and ScamSniffer. Both blocklists have already taken the site offline, and current status is reported as taken offline. Evidence gaps remain: the exact payload delivered to victims, any credential‑stealing forms, and the full set of URLs hosted under the domain have not been publicly disclosed.

Additionally, the low detection count on VirusTotal suggests limited analyst exposure rather than a benign profile. Defenders should add vote‑psyopanime.xyz and its resolving IP 188.114.96.3 to deny‑list rules in DNS firewalls and web proxies. Continuous monitoring of Cloudflare‑owned IP ranges for similar rapid‑registration domains is advised. Where possible, ingest the SSL certificate fingerprint into TLS inspection policies to flag mismatched Google‑issued certs on unrelated hostnames. Incident response teams should treat any traffic to this domain as malicious and investigate associated user accounts for potential credential compromise.