votemarketcap[.]com

This domain, votemarketcap.com, is flagged as a high-risk cryptocurrency phishing site designed to impersonate legitimate cryptocurrency tracking platforms. Analysis indicates the domain was created to deceive users into entering wallet credentials or approving malicious transactions, likely leveraging a cryptocurrency drainer kit. The site exhibits no legitimate branding affiliation with known crypto services, and its infrastructure aligns with common phishing tactics targeting digital asset holders. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 13, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 104.21.63.245. Security vendor detections on VirusTotal stand at 11/95, with the domain appearing on 4 distinct security blocklists. The SSL certificate is issued by Google Trust Services, and the domain is actively blocked by multiple security providers, including MetaMask and PhishDestroy. Additionally, it has been identified in 2 threat intelligence pulses on AlienVault OTX, further confirming its malicious classification. As of the latest assessment, votemarketcap.com has been taken offline, likely due to enforcement actions by hosting providers or registrars. However, residual risk persists as similar domains may re-emerge under different names or infrastructure. Users who interacted with the domain are advised to revoke any connected wallet permissions, monitor transaction histories for unauthorized activity, and verify the legitimacy of any linked services. Organizations should update blocklists and threat intelligence feeds to include this domain and its associated indicators to prevent future exposure.