flrvote[.]xyz

flrvote.xyz is a phishing domain that has been flagged as malicious by 6 out of 91 vendors on VirusTotal. The domain was taken offline after detection by PhishDestroy on June 18, 2026. Despite its current offline status, it was previously listed on public blocklists by PhishDestroy, MetaMask, and SEAL, indicating its malicious intent.

The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP address managed by Cloudflare, Inc., located in the US. The SSL certificate for flrvote.xyz was issued by Google Trust Services, which is often used by legitimate sites, making it more challenging for users to identify the threat. The platform risk score for this domain is 75 out of 100, highlighting its potential danger during its active period.

Phishing domains like flrvote.xyz exploit the gap between domain registration and antivirus database updates. PhishDestroy's detection pipeline operates upstream of traditional antivirus vendors, capturing these threats in their early stages. This proactive approach allows for the identification and mitigation of phishing domains before they can cause significant harm to users. The swift action taken against flrvote.xyz demonstrates the effectiveness of this strategy in combating online threats.