manganow[.]pumpvote[.]us

On 24 July 2026, the domain manganow.pumpvote.us was observed to resolve to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. The domain was registered through Dynadot LLC on 6 March 2026 and is protected by a Let’s Encrypt certificate (E8). The authoritative name servers are fonzie.ns.cloudflare.com and luciana.ns.cloudflare.com. The HTTP response returned a page with the title “Pump | Voting”, and the site has been taken offline at the time of analysis.

Threat intelligence classifies the site as a generic phishing operation. VirusTotal scans show that three of ninety‑four scanning engines flagged the domain as malicious. Independent blocklist services PhishDestroy and ScamSniffer have added the domain to their deny lists, and it appears on two additional security blocklists.

No further technical artefacts such as redirects, payloads, or credential‑harvesting forms have been disclosed. Given the association with Cloudflare’s network, the short registration age, and the presence on multiple blocklists, defensive teams should add the domain and its resolving IP to network‑level deny lists, enforce URL filtering, and monitor for any resurgence. Continuous re‑evaluation is recommended in case the site is re‑hosted or the certificate is renewed.