votes[.]bitvavo[.]cash

This domain, votes.bitvavo.cash, poses a significant phishing threat by impersonating the official Bitvavo cryptocurrency exchange. The page title "Bitvavo Official Voting" is designed to trick users into believing they are participating in a legitimate voting event, when in reality any credentials or personal information entered would be stolen by attackers. The site is currently offline, but it could reappear under a similar name, so vigilance is essential.

PhishDestroy identified this threat through multiple reliable sources. The domain was registered through Dynadot Inc and, at the time of analysis, a striking 9 out of 95 security vendors on VirusTotal flagged it as malicious. It also appears on one security blocklist, confirming its dangerous nature. The domain resolves to IP address 104.21.79.221, which is associated with Cloudflare, a common hosting provider used by phishers to obscure their true location. The site's status has been updated to offline, meaning it is no longer accessible, but the underlying infrastructure may still be active.

If you have visited this site or entered any information, take immediate action. Change your Bitvavo password and enable two-factor authentication if you haven't already. Monitor your account for unauthorized transactions and contact Bitvavo support to report the incident. Run a full antivirus scan on your device to check for any malware. To stay safe in the future, always verify the URL of any site claiming to be a cryptocurrency exchange—official Bitvavo domains end in .com, not .cash. Remember, legitimate companies never ask for sensitive information through unsolicited voting or survey pages.