vote-superfortune[.]xyz

Analysis of vote-superfortune.xyz indicates this domain is actively flagged as malicious infrastructure associated with phishing operations. Registered on May 31, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain has drawn attention from multiple security sources. As of July 29, 2026, six out of 91 security vendors on VirusTotal classify the domain as harmful, and it appears on two independent security blocklists, including PhishDestroy and ScamSniffer.

These detections suggest the domain is being used to host or redirect to phishing content, though the specific nature of the scam—such as fake voting portals, fraudulent surveys, or credential harvesting—remains unconfirmed due to limited public analysis of the site’s content. The domain’s creation date aligns with recent phishing campaigns, and its registration via a registrar frequently associated with abusive domains further elevates risk. No additional context—such as hosting provider, IP address, or SSL certificate details—has been provided, which limits infrastructure attribution.

Defenders should treat this domain as active phishing infrastructure and block access at the network level. Organizations using PhishDestroy or ScamSniffer may already have protections in place, but manual verification of endpoint and email security controls is recommended to prevent exposure. If user interaction data becomes available, monitoring for credential theft or secondary payload delivery should be prioritized.