votes-hachiko[.]xyz

PhishDestroy identifies votes-hachiko.xyz as a confirmed cryptocurrency drainer site engaged in active phishing operations. The domain prioritizes deceptive engagement by mimicking legitimate voting or reward platforms to lure victims into connecting cryptocurrency wallets. While no specific brand impersonation has been confirmed at this stage, the site functions as a drainer kit designed to exfiltrate private keys, seed phrases, and transaction signing rights under the guise of participation or reward distribution. The infrastructure is purpose-built for fraudulent token or voting simulations, with the domain registered to obfuscate its malicious intent while hosting a phishing page that activates upon wallet connection.

Technical indicators confirm the malicious nature of votes-hachiko.xyz. The domain exhibits 0 detections out of 95 on VirusTotal, indicating a low detection rate despite known malicious reputation on two prominent blocklists (SEAL and MetaMask). The domain was registered on March 24, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 188.114.97.3. It utilizes a legitimate Let's Encrypt SSL certificate to appear trustworthy to unsuspecting users. Despite active blocking by SEAL and MetaMask, the site remains accessible on other networks and continues to operate without widespread detection.

The current operational status of votes-hachiko.xyz is active and under continued threat investigation. While two security blocklists have flagged the domain, broader detection remains insufficient to protect users across all networks. No official takedown actions have been publicly reported. Until comprehensive blocking and remediation occur, users are advised to avoid accessing this domain and verify URLs prior to any cryptocurrency-related interaction. This domain represents a moderate to high risk due to its drainer functionality and active phishing operations targeting digital asset owners.