votes-dreamcash[.]xyz

The domain votes-dreamcash.xyz was registered on March 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently resolved to the Cloudflare address 104.21.32.4, which is associated with ASN 13335 in the United States. No SSL certificate was observed, indicating that the site was served over plain HTTP. The authoritative nameservers are olof.ns.cloudflare.com and uma.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The page title retrieved from the site reads "Season One | Dreamcash," but no additional content analysis is available because the site has been taken offline as of the report date, July 24, 2026.

Threat intelligence shows that three of ninety‑four security vendors on VirusTotal flagged the domain, and it appears on four independent blocklists, specifically PhishDestroy, MetaMask, ScamSniffer, and SEAL. The risk rating assigned is elevated, reflecting the combination of recent creation, lack of transport security, and multiple detections. Defenders should continue to block the domain at network perimeter devices, update any URL filtering or DNS sinkhole lists with the observed IP address and domain, and monitor for any re‑appearance of the host on alternative CDNs or IP ranges.

Because the site is offline, dynamic analysis is not possible; however, the presence of the page title suggests an attempt to lure victims with a Dreamcash‑related narrative. Organizations should remain vigilant for emails or messages referencing Dreamcash or similar terminology and enforce strict verification of any credential requests that reference this brand. The limited evidence does not disclose the exact phishing mechanism, so continued observation of related traffic patterns is recommended.