waronusd1-votes[.]com

PhishDestroy flags waronusd1-votes.com as an active crypto drainer impersonating the WarOnUSD1 brand, created March 31, 2026. This malicious domain resolves to IP 104.21.6.55 and currently shows 1/95 VirusTotal detections, indicating it remains undetected by most antivirus engines. Registered through Metaregistrar BV using a Let's Encrypt SSL certificate, the domain leverages brand impersonation tactics to deceive users into connecting crypto wallets or entering credentials. This domain exhibits multiple red flags consistent with crypto drainer campaigns. The 1/95 VirusTotal score suggests evasion of automated detection systems, while the use of a legitimate registrar and SSL certificate adds a veneer of authenticity. The recent creation date and resolution to a known hosting IP (104.21.6.55) further support its malicious intent. Without existing blocklist entries, users may encounter this threat unknowingly through social media, email, or search engine manipulation. Users should avoid interacting with this domain entirely. If already visited, disconnect wallets immediately and scan devices with PhishDestroy. Never enter credentials or connect crypto wallets to unknown sites. Report the domain to your security team or PhishDestroy for takedown. Monitor wallet transactions closely for unauthorized transfers.