vote-dreamcash[.]xyz

The domain vote-dreamcash.xyz was registered on March 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare infrastructure (ASN 13335) with the IP address 104.21.83.220 located in the United States. DNS resolution uses the Cloudflare nameservers dee.ns.cloudflare.com and walt.ns.cloudflare.com. The site presented the page title "Season One | Dreamcash" before being taken offline, and no SSL certificate was observed during the brief active period. VirusTotal scanned the domain and three of ninety‑four security vendors flagged it, indicating a modest detection rate.

The domain appears on three public blocklists and is specifically blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment of malicious intent. The threat type has been classified as generic phishing, and the risk level is elevated, reflecting the potential for credential harvesting or other fraudulent activity. Current HTTP status shows the site is offline, limiting immediate exploitation but leaving the infrastructure reusable for future campaigns.

Uncertainty remains regarding the exact payload or credential collection mechanism because the page content has not been publicly released. Defenders should continue to block the domain at network perimeter devices, update URL filtering rules, and monitor for any re‑registration or reuse of the same IP address or Cloudflare account. Threat intelligence sharing platforms should be notified of the domain’s characteristics to improve collective detection, and any related indicators of compromise observed in logs should be correlated with this infrastructure for rapid response.