vote-theos[.]pages[.]dev

The domain vote-theos.pages.dev was registered on May 12, 2026 via Cloudflare Pages and currently resolves to the IP address 172.66.46.242, which is hosted by Cloudflare, Inc. in Canada. The site presents an HTTP 200 response and serves a TLS certificate issued by Google Trust Services under the WE1 designation. The page title returned by the server is "Theo". Threat intelligence flags the domain as a high‑risk generic phishing campaign and lists it on three security blocklists. It is actively blocked by multiple mitigation services, including PhishDestroy, MetaMask, and SEAL. Additional scoring indicates a Gridinsoft trust rating of 0 out of 100. VirusTotal records show the domain has been examined by 92 scanning engines without any vendor raising a detection, though this absence of flags does not constitute confirmation of safety. Defenders should treat the domain as malicious, block network traffic to the associated IP, and monitor DNS queries for the domain. Given the recent creation date and active status, continued observation is advised to detect any evolution of the campaign, such as the appearance of new payloads or changes in hosting infrastructure.