newvote[.]fun

The domain newvote.fun was registered on March 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). No TLS certificate is presented; the site serves HTTP only and returns the page title "Just a moment...". Gridinsoft assigns the domain a trust score of 0 / 100, indicating a lack of reputable attributes. VirusTotal analysis shows that one of ninety‑four security vendors flagged the domain, suggesting at least one detection of malicious behavior.

The domain is currently offline, yet it remains listed on four external blocklists and is actively blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. Nameserver records point to porter.ns.cloudflare.com and priscilla.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The combination of a newly created domain, absence of SSL, low trust score, and detection by a security vendor aligns with typical generic phishing infrastructure.

Uncertainty remains regarding the specific payload or credential‑harvesting technique, as no further page content or target brand has been disclosed. Defenders should continue to enforce blocklist rules for newvote.fun, monitor any re‑appearance of the domain on DNS or hosting services, and consider adding the IP address 188.114.96.3 to network‑level deny lists. Given the lack of encryption, any client attempting to access the site will encounter certificate errors, which can be leveraged as an additional indicator of compromise in endpoint monitoring solutions.