vote-mantle[.]xyz

The domain vote-mantle.xyz has been identified as a brand impersonation threat specifically targeting the Mantle brand. This domain is currently offline, but its recent activity posed a significant risk to users who may have encountered it. The site was designed to mimic legitimate Mantle properties, likely to steal credentials or deploy crypto drainers.

Analysis reveals that vote-mantle.xyz was flagged by 6 out of 95 VirusTotal security vendors, indicating moderate detection across the security community. The domain was registered on September 28, 2025, through NiceNIC International Group Co., Limited, and resolved to IP address 172.67.182.139. It appeared on one security blocklist and had no SSL certificate, further undermining its legitimacy. The page title observed was "Un instant…", suggesting a loading or redirect page typical of phishing kits.

Although the domain is now offline, users should remain vigilant. PhishDestroy recommends avoiding any interaction with vote-mantle.xyz or similar domains. If you have visited this site, change your passwords and enable two-factor authentication on affected accounts. Report any suspicious activity to the relevant brand security team. Stay informed and verify URLs before entering sensitive information.