vote-relays[.]xyz

PhishDestroy identifies vote-relays.xyz as a crypto drainer phishing domain currently under active investigation. The domain is suspected of impersonating legitimate services to facilitate unauthorized cryptocurrency transactions. Users are advised to treat this domain with extreme caution and verify its legitimacy through trusted platforms before engaging. This domain was flagged by 1 of 95 VirusTotal vendors, indicating limited detection at the time of analysis. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, vote-relays.xyz resolves to IP 188.114.97.3 and was created on May 05, 2026. The domain holds a Let's Encrypt SSL certificate and remains unlisted on major blocklists, reflecting a newly emerged and potentially evolving threat. The current status of vote-relays.xyz is active, with no confirmed blocklist entries reported. Users should avoid interacting with this domain, refrain from entering personal or financial information, and report any suspicious activity to PhishDestroy for further analysis. Organizations are advised to monitor network traffic for connections to IP 188.114.97.3 and update their threat intelligence feeds accordingly.