com-voting[.]xyz

This domain is flagged under active investigation for generic voter registration phishing, a threat type designed to harvest personal data under the guise of electoral processes. Analysis indicates the infrastructure is still operational, with no prior detection history despite its recent deployment. Infrastructure analysis reveals the domain com-voting.xyz was registered on June 30, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It currently resolves to the IP address 104.21.76.248, a Cloudflare-associated endpoint that may obscure further attribution. VirusTotal reports zero detections across 95 engines, suggesting either evasion techniques or novelty in the campaign. No blocklist entries or trust score degradations have been recorded as of this assessment, though the domain's creation date and thematic focus align with patterns observed in election-cycle phishing operations. Mitigation for this threat type requires multi-layered defenses. Network-level protections should include DNS filtering to block resolution of com-voting.xyz and its associated IP 104.21.76.248. Email security systems should quarantine messages containing this domain, particularly those impersonating voter registration portals. Endpoint detection rules should monitor for credential submission attempts to untrusted electoral-themed domains. Given the domain's recent registration and lack of prior detection, security teams should treat any interaction with this infrastructure as high-risk and prioritize forensic analysis of affected systems.