# voting-nado.xyz — SUSPICIOUS

> PhishDestroy identifies voting-nado.xyz as a generic voting fraud scam page hosting a drainer kit. VirusTotal currently scores it 0/95 with a Let's Encrypt SSL.

## Summary
PhishDestroy analysts have flagged voting-nado.xyz as an active generic phishing domain that poses a voting fraud threat. The page is configured to harvest voter credentials and payment data under the guise of a fake voting portal. No specific brand or drainer kit signature has been released publicly; the infrastructure is generic and designed for broad targeting rather than a single high-profile brand.    Technical indicators are as follows: VirusTotal returns 0/95 detections as of this report, the domain resolves to IP 104.21.31.235, and it was registered on April 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Google Safe Browsing has not yet flagged the domain, and it remains absent from all major real-time blocklists at this time.    The domain is currently active under investigation with a risk level marked as under_investigation. Users should avoid interacting with this domain and ensure browser protections are enabled. Remaining risk is moderate due to the domain’s young age, lack of detection, and absence from blocklists, which suggests the phishing campaign may still be in early deployment. Organizations are advised to monitor for related artifacts and block the IP and domain at the network perimeter.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-04 18:15:00
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.31.235

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/voting-nado.xyz
- PhishDestroy: https://phishdestroy.io/domain/voting-nado.xyz/
- LLM endpoint: https://phishdestroy.io/domain/voting-nado.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/voting-nado.xyz/
Last updated: 2026-04-06