votes-gensyn[.]com

The domain votes-gensyn.com was observed on 12 July 2026 as part of a high‑risk generic phishing operation. The site returns an HTTP 403 status code and displays the page title “Just a moment…”. Its risk level is marked high and the infrastructure remains active. Registration data shows the domain was created on 9 May 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IP address 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada. The authoritative nameservers are brett.ns.cloudflare.com and jule.ns.cloudflare.com. The TLS certificate is issued by Let’s Encrypt (E8), indicating the site is served over HTTPS. Threat intelligence sources corroborate the malicious nature of the domain. It appears in one AlienVault OTX pulse and is listed on a single security blocklist. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports that 2 out of 95 scanned security vendors flag the domain as malicious. The domain has also been blocked by PhishDestroy. These indicators collectively support the high‑risk classification. Defenders should add votes-gensyn.com to outbound and inbound blocklists and monitor traffic to the associated IP 188.114.96.3 for anomalous connections. Continuous re‑analysis of the TLS certificate and DNS records is advised, as the infrastructure may be repointed. Organizations that rely on email or web filtering should prioritize this indicator to reduce exposure to credential‑harvesting attempts.