# votes-nado.xyz — SUSPICIOUS

> votes-nado.xyz identified as a fake survey scam tricking users into sharing personal data. Check the full report for safety details.

## Summary
PhishDestroy identifies votes-nado.xyz as an active fake survey scam domain currently under investigation for phishing activities. The site poses as a legitimate survey platform to deceive users into submitting sensitive information under false pretenses. This domain was flagged due to its suspicious registration patterns and lack of trust indicators, warranting immediate caution for visitors.  

This domain was registered on March 29, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar known for accommodating high volumes of disposable domains. It resolves to IP address 104.21.56.218, which shares infrastructure with other flagged domains and shows no association with reputable organizations. A Let's Encrypt SSL certificate provides a false sense of security, though VirusTotal currently reports 0/95 detections, indicating it remains undetected by most security engines. The domain's recent creation date and absence from major blocklists suggest it is still in its operational infancy, increasing the risk of unchecked malicious activity.  

To mitigate exposure to this fake survey scam, avoid interacting with votes-nado.xyz entirely. Users who may have already engaged should refrain from entering any personal or financial data and scan their devices for malware. Report this domain to your security provider and local cybercrime units to aid in broader threat intelligence. Block the domain at your network level using updated threat feeds to prevent further propagation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-29 23:03:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.56.218

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/votes-nado.xyz
- PhishDestroy: https://phishdestroy.io/domain/votes-nado.xyz/
- LLM endpoint: https://phishdestroy.io/domain/votes-nado.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/votes-nado.xyz/
Last updated: 2026-04-04