vote[.]alturatrade[.]xyz

Analysis of vote.alturatrade.xyz shows a newly registered domain (creation date 10 June 2026) that is currently active and resolves to the IP address 196.251.107.102. The domain is delegated to the nameservers coco.bunny.net and kiki.bunny.net, both of which are associated with a public DNS provider and do not provide any obvious affiliation with a legitimate service. Registration was completed through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been used for other malicious infrastructure in the past. VirusTotal reports that 2 of 91 security vendors have flagged the domain, indicating that at least a small subset of scanners have identified it as suspicious. The threat classification supplied is generic_phishing with a high risk rating, suggesting the domain is being used to harvest credentials or other sensitive information. No additional intelligence such as page content, targeted brand, or observed phishing kits is available at this time, leaving the exact lure unknown. Defenders should treat the domain as hostile: block DNS resolution and HTTP/HTTPS traffic to the IP, add the domain to URL filtering and email security policies, and monitor for any related activity originating from the same IP or nameserver pair. Continuous re‑evaluation is advised as further detections may emerge.