# based-voting.com — SUSPICIOUS

> based-voting.com is a crypto drainer impersonating a voting portal. Flagged by 2 of 95 VirusTotal vendors. Verify safety on PhishDestroy before clicking.

## Summary
based-voting.com is a confirmed crypto drainer domain currently active and posing as a voting portal to deceive users. This domain leverages social engineering tactics to trick visitors into connecting cryptocurrency wallets under the false pretense of participating in a voting process, enabling unauthorized fund transfers. The threat actor behind this domain is actively distributing malicious payloads to unsuspecting users.  

PhishDestroy identifies that based-voting.com was flagged by 2 of 95 VirusTotal security vendors at the time of analysis. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 172.67.159.219. Domain creation occurred on March 23, 2026, indicating a very recent registration. The domain holds a valid SSL certificate issued by Let's Encrypt, which may be used to falsely enhance trustworthiness. With only 2 security vendors detecting the threat and no additional blocklist data provided, the overall detection coverage remains critically low. The trust and reputation scores for this domain are not disclosed by available threat intelligence sources, further emphasizing the need for caution.  

Users are strongly advised to avoid interacting with based-voting.com due to its confirmed malicious nature. This domain should be treated as a high-risk threat and immediately blocked at the network and endpoint levels. Security teams and individual users should verify domain safety using PhishDestroy’s database or similar threat intelligence platforms before any interaction. If this domain has been accessed, disconnect from the internet, scan for unauthorized transactions in connected wallets, and report the incident to relevant cybersecurity authorities. Always exercise caution when prompted to connect cryptocurrency wallets or enter sensitive information on unfamiliar websites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-23 23:33:44
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.159.219

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4e892ef2-aa20-4bc7-98a1-65efe38672ef
- PhishDestroy: https://phishdestroy.io/domain/based-voting.com/
- LLM endpoint: https://phishdestroy.io/domain/based-voting.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/based-voting.com/
Last updated: 2026-04-01