votify-xaman[.]info

Analysis of votify-xaman.info indicates that the domain was registered on July 15 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are jill.ns.cloudflare.com and titan.ns.cloudflare.com, pointing to Cloudflare's DNS service. DNS resolution returns a single IPv4 address, 188.114.97.3, which is the current hosting endpoint. The domain appears on one public blocklist and has been added to the PhishDestroy blocklist, confirming that at least one sinkhole provider has taken mitigation action. VirusTotal records show the domain was submitted to 91 scanning engines; none of the engines raised a detection at the time of the scan.

The absence of detections does not imply safety, as the payload or page content may not have been captured. The domain is still active as of the report date, August 07 2026, and no evidence of takedown or DNS change has been observed. Given the limited publicly available telemetry, the primary indicators are the registration date, the Cloudflare‑hosted infrastructure, and the single IPv4 address. No SSL certificate details, HTTP response codes, page title, or content hashes have been published, so the exact phishing landing page cannot be described.

Defenders should consider adding 188.114.97.3 to network‑level deny lists, enforce DNS filtering for votify-xaman.info, and monitor for any new activity linked to the Cloudflare nameservers. Continuous re‑scanning on VirusTotal or similar platforms is recommended, as future analysis may reveal malicious payloads. Organizations should also review email gateway logs for references to the domain and block any messages that contain URLs pointing to it. The investigation remains open, and further evidence may emerge from traffic analysis or sandbox execution of any downloaded content.