vote-lighters-com[.]pages[.]dev

The domain vote-lighters-com.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 172.66.47.183, which is associated with AS13335 Cloudflare, Inc. in the United States. The site presents a page title of "Suspected phishing site | Cloudflare" and employs HSTS, HTTP/3, and Cloudflare‑provided TLS issued by Google Trust Services under the WE1 certificate. An HTTP request returns a 403 status code, indicating restricted access, and the site is currently marked offline.

Analytical engines on VirusTotal recorded six positive detections out of ninety‑three scanned vendors, reflecting modest consensus of malicious behavior. Independent blocklists have listed the domain on two watchlists, specifically PhishDestroy and ScamSniffer, and Gridinsoft assigns a trust score of zero out of one hundred, confirming a lack of credibility. The nameserver configuration uses ruth.ns.cloudflare.com and maciej.ns.cloudflare.com, both Cloudflare‑hosted, reinforcing the reliance on a shared infrastructure.

While the page title and detection metrics consistently identify the domain as a credential‑phishing operation, no additional content analysis is available, leaving the exact phishing payload or targeted brand undefined. Defenders should add the domain to deny‑list rules, monitor DNS queries for the 172.66.47.183 address, and maintain vigilance for any re‑hosting attempts that might reuse the same Cloudflare identifiers. Continuous observation of the associated blocklists and re‑scanning by threat‑intel platforms are recommended to capture any evolution of the campaign.