voting-flap[.]info

Analysis indicates that the domain voting-flap.info was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 15, 2026. The domain resolves to the IP address 104.21.64.160 and uses Cloudflare name servers bill.ns.cloudflare.com and serenity.ns.cloudflare.com. VirusTotal records show that the domain was scanned by 91 security vendors, none of which reported a detection at the time of analysis; the report explicitly notes that the lack of detections does not constitute a safety guarantee. The domain appears on a single public security blocklist and is currently listed by the PhishDestroy blocklist, suggesting that at least one external trust feed has identified it as malicious. No additional public reputation scores, Safe Browsing status, or Open Threat Exchange entries are available for this host. The site has not been publicly examined for page content, SSL certificate details, or HTTP response codes, leaving the exact nature of the hosted payload unknown. The available evidence points to a newly created infrastructure that aligns with typical generic phishing campaigns, but the limited visibility prevents confirmation of the specific phishing kit or targeted brand. Defenders should consider adding voting-flap.info to outbound and inbound filtering rules, monitor DNS queries for the associated IP, and maintain vigilance for any credential‑stealing activity that may originate from this host. Ongoing investigation is required to determine whether the domain is actively delivering phishing content or remains dormant.