votes-monad[.]xyz

This domain is flagged as an active cryptocurrency wallet drainer designed to impersonate Monad, a blockchain platform. The site presents itself as an official Monad interface, tricking users into connecting their wallets and authorizing malicious transactions. Once permissions are granted, the site silently drains funds from connected wallets without further user interaction, posing a direct financial threat to visitors. Analysis indicates the domain was registered on March 02, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 188.114.96.3 and is hosted behind Cloudflare infrastructure, utilizing HTTP/3 for communication. The domain appears on four security blocklists, and 15 out of 95 security vendors on VirusTotal have flagged it as malicious. The SSL certificate is issued by Let’s Encrypt, a common tactic to appear legitimate while masking fraudulent activity. If you visited votes-monad.xyz or connected a wallet to the site, immediately revoke any active wallet permissions using a trusted blockchain explorer or wallet management tool. Transfer remaining assets to a new, secure wallet and monitor all connected accounts for unauthorized transactions. Avoid interacting with any links or prompts from the domain, and report the incident to relevant security teams for further investigation.