votes-kinetiq[.]events

The domain votes-kinetiq.events was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335). DNS resolution points to the address 172.67.153.195, which resolves to a Cloudflare edge node located in the United States. The site presented a single HTML title tag reading "Just a moment..." and did not serve an SSL/TLS certificate, indicating an unencrypted HTTP endpoint. Analysis of public blocklists shows the domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reflecting consensus among threat‑mitigation services that the site is malicious.

The Gridinsoft trust score of 0 out of 100 further corroborates its low reputation. VirusTotal scans recorded three detections out of ninety‑three scanners, confirming that at least a subset of AV engines flagged the domain as malicious. The site has since been taken offline, as indicated by the current status flag.

While the page title provides no direct evidence of the phishing payload or targeted brand, the combination of registrar information, Cloudflare hosting, lack of TLS, blocklist presence, low trust score, and VirusTotal detections collectively support a high confidence verdict of a phishing‑type operation. Defenders should immediately block DNS resolution to votes-kinetiq.events and any traffic to its associated IP address, monitor for re‑registration or resurrection of the domain, and consider adding the IP to network‑wide deny lists. Continuous observation of Cloudflare‑originated IP ranges for similar low‑reputation domains is also recommended, as attackers frequently reuse such infrastructure for rapid‑deployment phishing campaigns.