vote-genius[.]icu

This domain, vote-genius.icu, has been identified as a high-risk generic phishing infrastructure. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 01, 2026, the domain has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The domain has also been included in 8 threat intelligence pulses on AlienVault OTX, further confirming its malicious nature. Currently, the domain is still active and resolves to the IP address 188.114.96.3, which is located in California and operated by CloudFlare, Inc. The domain is protected by a Let's Encrypt SSL certificate, which, while legitimate, does not guarantee the safety of the site. Analysis of the domain's HTTP status reveals a 403 Forbidden error, suggesting that the server is actively blocking certain types of traffic, possibly to evade detection or to restrict access to specific users. This domain is also flagged by PhishDestroy, a security blocklist, and 3 out of 95 security vendors on VirusTotal have identified it as malicious. The combination of a low trust score, presence in multiple threat intelligence databases, and the use of a reputable hosting service and SSL provider raises significant red flags for potential misuse. Defenders should monitor network traffic for connections to this domain and consider blocking it to mitigate the risk of phishing attacks. Additionally, users should be cautious of any emails or links directing them to vote-genius.icu, as it is likely to be part of a broader phishing campaign designed to steal sensitive information. Regular updates to security policies and awareness training can help in recognizing and avoiding such threats.