# waronusd1-votes.com — SUSPICIOUS

> Domain waronusd1-votes.com (created Mar 31) mimics WarOnUSD1 in an active crypto drainer scam. Verify before clicking—scan with PhishDestroy for safety.

## Summary
PhishDestroy flags waronusd1-votes.com as an active crypto drainer impersonating the WarOnUSD1 brand, created March 31, 2026. This malicious domain resolves to IP 104.21.6.55 and currently shows 0/95 VirusTotal detections, indicating it remains undetected by most antivirus engines. Registered through Metaregistrar BV using a Let's Encrypt SSL certificate, the domain leverages brand impersonation tactics to deceive users into connecting crypto wallets or entering credentials.  This domain exhibits multiple red flags consistent with crypto drainer campaigns. The 0/95 VirusTotal score suggests evasion of automated detection systems, while the use of a legitimate registrar and SSL certificate adds a veneer of authenticity. The recent creation date and resolution to a known hosting IP (104.21.6.55) further support its malicious intent. Without existing blocklist entries, users may encounter this threat unknowingly through social media, email, or search engine manipulation.  Users should avoid interacting with this domain entirely. If already visited, disconnect wallets immediately and scan devices with PhishDestroy. Never enter credentials or connect crypto wallets to unknown sites. Report the domain to your security team or PhishDestroy for takedown. Monitor wallet transactions closely for unauthorized transfers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: WarOnUSD1

## Domain Intelligence
- Registered: 2026-03-31 01:01:28
- Registrar: Metaregistrar BV
- IP: 104.21.6.55

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5c5ce6c7-b2ba-4065-b31b-dcde3b00d890
- PhishDestroy: https://phishdestroy.io/domain/waronusd1-votes.com/
- LLM endpoint: https://phishdestroy.io/domain/waronusd1-votes.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/waronusd1-votes.com/
Last updated: 2026-03-31