vote-solvprotocol[.]xyz

The domain vote-solvprotocol.xyz is currently active and classified as a generic_phishing threat with a high risk rating. It was registered on May 11, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare IP address 172.67.204.232, which is geo‑located in Canada. The site serves an HTTP 403 response and presents the page title "Just a moment..."; no further page content has been captured, so the exact phishing vector remains unknown. Infrastructure analysis shows the domain is protected by Cloudflare DNS (raina.ns.cloudflare.com, eoin.ns.cloudflare.com) and uses a Let’s Encrypt/E7 SSL certificate. Reputation data indicate a Gridinsoft trust score of 0/100, inclusion on three security blocklists, and detection by PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in one pulse, and VirusTotal reports a single positive detection out of 91 scanners. Given the high‑risk classification, defenders should block the domain at perimeter and endpoint layers, monitor DNS queries for the associated IP, and consider adding the domain and its IP to internal threat‑intel feeds. Ongoing observation is advised to capture any content changes that could clarify the phishing campaign's target or methodology.