# vote-mexc.fun — MALICIOUS — Crypto Drainer (Solana Drainer)

> Discover key insights on vote-mexc.fun, a medium-risk crypto drainer domain now offline. Learn its impact and technical details here.

## Summary
PhishDestroy identifies vote-mexc.fun as a medium-risk crypto drainer domain masquerading under the page title "Mexc Live Voting." The domain is linked to the Solana drainer kit, targeting cryptocurrency assets by exploiting user interactions. Classified as a crypto threat, it poses financial risks to users engaging with the site.

Technical indicators reveal that vote-mexc.fun was registered on February 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolved to IP address 188.114.96.3 and appeared on three separate security blocklists. VirusTotal flagged this domain by three security vendors out of ninety-five, corroborating its malicious nature. The infrastructure aligns with common patterns observed in crypto drainer campaigns.

Currently, vote-mexc.fun has been taken offline, mitigating further risk to potential victims. PhishDestroy continues to monitor the domain’s status and associated indicators to support cybersecurity defenses. Users are advised to avoid interaction with this domain and remain vigilant against similar crypto phishing tactics.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 200)
- Drainer type: Solana Drainer
- Target brand: MEXC
- Page title: Mexc Live Voting

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dolly.ns.cloudflare.com nick.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/HL2xkXxz/545da7e1854e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/43a70e43-507c-4aad-99d3-a48b56936929
- Wayback Machine: https://web.archive.org/web/https://vote-mexc.fun
- PhishDestroy: https://phishdestroy.io/domain/vote-mexc.fun/
- LLM endpoint: https://phishdestroy.io/domain/vote-mexc.fun/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/vote-mexc.fun/
Last updated: 2026-03-19