vote-soil[.]cc

The domain vote-soil.cc is currently active and flagged as a cryptocurrency drainer, a threat type designed to siphon digital assets from connected wallets without user consent. Analysis confirms the domain remains operational, presenting an elevated risk to users who interact with it, particularly those in the cryptocurrency ecosystem. Infrastructure analysis reveals the domain was registered on June 01, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, an unusual future date suggesting potential fraudulent activity. It resolves to the IP address 172.67.178.198 and is secured with an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. The domain is flagged by 7 of 95 security vendors on VirusTotal and appears on three distinct security blocklists. Additional indicators include a Gridinsoft trust score of 0/100 and blocking by multiple security platforms, further corroborating its malicious nature. The page title, 'Just a moment...', is a common obfuscation technique used to delay detection while malicious scripts execute. Current evidence indicates vote-soil.cc is actively targeting users with cryptocurrency wallet drainer scripts. Organizations and individuals are advised to block the domain at the network level and update endpoint protection rules to prevent access. Users should verify wallet connections before approving transactions and avoid interacting with unsolicited links or prompts. Given the domain's presence on multiple blocklists and its association with known malicious infrastructure, immediate mitigation steps are recommended to prevent asset loss.