# votingdex.com — SUSPICIOUS

> PhishDestroy flags votingdex.com as an active crypto-drainer phishing site that appeared 3/29/26 and still shows 0/95 VirusTotal detections; do NOT connect.

## Summary
PhishDestroy identifies votingdex.com as an active crypto-drainers scam site posing as a DeFi platform to trick users into connecting their digital wallets so the attackers can silently transfer tokens to their own accounts. Once a victim approves a wallet connection, malicious scripts at votingdex.com begin draining supported assets such as USDT, ETH, or other tokens without additional confirmation. The lure is a fake trading interface that promises unrealistic returns, exploiting the common “connect wallet to start” flow seen on legitimate DeFi dashboards. Because wallet connections are one-click approvals, victims often realize the theft only after tokens vanish from their wallet and the site becomes unreachable.  This domain was flagged by PhishDestroy after technical analysis showed it is a newly created phishing site with zero detections on VirusTotal despite known malicious behavior. Votingdex.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 29, 2026, and currently resolves to IP 172.67.146.178 using a free Let’s Encrypt SSL certificate to appear legitimate. Automated scanners often miss fresh domains because their malicious payloads activate only after a wallet connection is approved, which explains the 0/95 VirusTotal score at time of discovery. The combination of a new domain, low detection rate, and active redirection to a crypto drainer payload places this site in active threat status under investigation.  If you visited votingdex.com, immediately disconnect your wallet from any dApps or websites, revoke any wallet approvals that may have been granted, and move any remaining assets to a new wallet using a hardware device if possible. Scan your device with an up-to-date antivirus and consider rotating all passwords used in crypto contexts. Report the domain and any transaction hashes to PhishDestroy for takedown and to help protect other users. Always verify any DeFi link by typing the official URL yourself and confirm the site uses HTTPS with a valid certificate from a trusted provider before connecting your wallet.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-29 03:22:11
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.146.178

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7a787ac2-1451-49d1-bfcc-47029b4d31e0
- PhishDestroy: https://phishdestroy.io/domain/votingdex.com/
- LLM endpoint: https://phishdestroy.io/domain/votingdex.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/votingdex.com/
Last updated: 2026-04-01