# vote-lighter.xyz — MALICIOUS

> vote-lighter.xyz is flagged for phishing risks and appears on multiple blocklists. Stay cautious and avoid interacting with this suspicious domain.

## Summary
PhishDestroy identifies vote-lighter.xyz as a medium-risk generic phishing domain. Registered on March 10, 2026, through PDR Ltd., the domain was created recently and used to host deceptive content under the page title "Lighter." The classification stems from its intent to impersonate or deceive users, typical for phishing operations.

Technical analysis shows that vote-lighter.xyz resolved to IP address 188.114.96.3. The domain appears on three separate security blocklists, and VirusTotal flags it with 6 detections out of 95 vendors, indicating moderate suspicion by antivirus and web filtering services. These indicators underscore the domain's involvement in malicious phishing activity.

Currently, vote-lighter.xyz is taken offline, mitigating immediate threats to users. However, its presence on blocklists and associated detections suggest caution is warranted. Users are advised to avoid engaging with this domain and to ensure protective measures are in place to block future phishing attempts linked to similar infrastructure.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Lighter

## Domain Intelligence
- Registered: 2026-03-10 11:07:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ns1.suspended-domain.com", "ns2.suspended-domain.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cdbec-d7f4-748a-a0cc-728143ed1d8f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1ab4ea9b-1d70-4077-8920-584af680faf1
- PhishDestroy: https://phishdestroy.io/domain/vote-lighter.xyz/
- LLM endpoint: https://phishdestroy.io/domain/vote-lighter.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/vote-lighter.xyz/
Last updated: 2026-03-19