# apps.moonvotecoins.top — SUSPICIOUS

> MoonVoteCoins.top is a crypto drainer phishing site flagged by 1 of 95 VirusTotal scanners; created March 29, 2026. Stop before you connect your wallet.

## Summary
PhishDestroy identifies apps.moonvotecoins.top as an active crypto drainer phishing domain designed to trick cryptocurrency users into connecting their wallets and approving malicious token transfers. The site mimics legitimate crypto-voting platforms to lure victims into granting unlimited spending permissions, allowing attackers to silently drain tokens directly from connected wallets. Once a wallet is linked, the drainer can transfer approved assets without additional prompts, making the theft immediate and irreversible.  This domain was flagged by PhishDestroy and detected by 1 out of 95 VirusTotal security vendors on April 5, 2026. It was registered on March 29, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED using a Let’s Encrypt SSL certificate. The site resolves to IP address 188.114.97.3, hosted on infrastructure known to be associated with cryptocurrency scams. Its recent creation date and low detection rate suggest it is part of an emerging campaign targeting crypto investors.  If you visited apps.moonvotecoins.top, immediately disconnect your wallet from the site and revoke any approvals you may have granted. Use your wallet’s built-in revoke function or visit a trusted revocation tool like revoke.cash to check and cancel any suspicious token approvals. Do not interact with wallet prompts from unknown sites, and consider moving remaining funds to a fresh wallet if you connected it. Report the domain to your antivirus provider and share this warning with others to help prevent further theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-29 19:00:13
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/apps.moonvotecoins.top
- PhishDestroy: https://phishdestroy.io/domain/apps.moonvotecoins.top/
- LLM endpoint: https://phishdestroy.io/domain/apps.moonvotecoins.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/apps.moonvotecoins.top/
Last updated: 2026-04-09