MalwareTips

Is voting-apyx.finance safe?

http://voting-apyx.finance/

28/100
High Risk

Analysis coverage: strong · 0 of 5 core capabilities

Verdict

Fake Apyx clone site using fake voting rewards to drain cryptocurrency wallets—confirmed crypto drainer scam.

This is a fake clone of the legitimate Apyx DeFi protocol designed to steal cryptocurrency. It impersonates the real apyx.fi with fraudulent "Genesis Vote" reward claims to trick users into connecting their wallets and draining their funds.

Read the full analysis
1 antivirus engine flagged this URLFortinet
Do not visit this site or connect your wallet to it. This is a confirmed cryptocurrency drainer scam impersonating the legitimate Apyx protocol. If you have already connected your wallet, immediately transfer your funds to a new wallet and revoke all approvals from this domain in your wallet's security settings.
Post Facebook

01 · Investigation Brief

Investigation Brief

The domain voting-apyx.finance is a typosquat and clone of the legitimate Apyx protocol (apyx.fi). Security researchers at PCRisk have documented this as an active crypto drainer that uses fake "Genesis Vote" governance claims to lure users into connecting their wallets, after which funds are stolen. The real Apyx protocol operates exclusively at apyx.fi and app.apyx.fi as a dividend-backed stablecoin and governance token project. Our scam-network fingerprint confirms this site matches known clone-of and typosquat patterns targeting Apyx. Multiple independent sources including YouTube security analysis and Web3 phishing intelligence reports flag voting-apyx.finance and its variants as active threats. No legitimate business registration, no contact email, and no connection to the official Apyx team exist for this domain.

Page Content

The page loads as a JavaScript single-page application with Tailwind CSS styling but no visible business information, contact email, or legitimate governance interface. The body contains only framework boilerplate and CSS variables—no actual voting mechanism or reward details are present. Four phone numbers and five addresses are listed but no verifiable business entity or official Apyx affiliation is documented anywhere on the page.

Infrastructure

The domain uses valid SSL (Google Trust Services) and is hosted on IP 104.21.29.241 with zero abuse reports. However, the clean hosting reputation does not indicate legitimacy—scammers routinely use legitimate CDN and hosting providers. Fortinet flags the domain as spam. External resources load from repeg-apyxusd.com (a related scam domain) and legitimate CDNs, suggesting coordinated infrastructure.

Domain History

WHOIS data is unavailable, preventing registration-date verification. The domain is not indexed in global traffic rankings. The SSL certificate has 89 days to expiry, consistent with temporary scam infrastructure. The site is a confirmed typosquat of apyx.fi and matches our clone-detection fingerprint with a suspicion score of 65/100.

Web Reputation

PCRisk security researchers identify this as the "Apyx Token Launch Voting Reward Scam"—a crypto drainer that tricks users with fake Genesis Vote promises. YouTube security analysis specifically examines voting-apyx.finance for wallet-connection risks and confirms it has no connection to official Apyx operations. Web3 phishing intelligence reports list this domain alongside similar variants (votes-apyx.fi, vote-apyx.fi) as active threats. Four scam complaints and zero positive reviews exist in the evidence package.

Why the score is 28

Saved antivirus evidence is adverse but no longer fresh. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Antivirus Engines

Saved result

1 engine flagged this URL

Every saved adverse engine is listed below. The full provider matrix remains available for audit.

Malicious
0
Suspicious
1
Total
92
Adverse antivirus results
EngineFinding
FortinetSuspiciousspam
All 92 engine results
  • Fortinet - spam - Suspicious
  • 0xSI_f33d - unrated - Clean
  • Abusix - clean - Clean
  • Acronis - clean - Clean
  • ADMINUSLabs - clean - Clean
  • AILabs (MONITORAPP) - clean - Clean
  • AlienVault - clean - Clean
  • alphaMountain.ai - unrated - Clean
  • AlphaSOC - unrated - Clean
  • Antiy-AVL - clean - Clean
  • ArcSight Threat Intelligence - unrated - Clean
  • AutoShun - unrated - Clean
  • Bfore.Ai PreCrime - unrated - Clean
  • BitDefender - clean - Clean
  • Bkav - unrated - Clean
  • BlockList - clean - Clean
  • Blueliv - clean - Clean
  • Certego - clean - Clean
  • ChainPatrol - unrated - Clean
  • Chong Lua Dao - unrated - Clean
  • CINS Army - clean - Clean
  • Cluster25 - unrated - Clean
  • CRDF - clean - Clean
  • Criminal IP - clean - Clean
  • CSIS Security Group - unrated - Clean
  • CTX AI - clean - Clean
  • Cyan - unrated - Clean
  • Cyble - clean - Clean
  • CyRadar - clean - Clean
  • desenmascara.me - clean - Clean
  • DNS8 - clean - Clean
  • Dr.Web - clean - Clean
  • EmergingThreats - clean - Clean
  • Emsisoft - clean - Clean
  • Ermes - unrated - Clean
  • ESET - clean - Clean
  • ESTsecurity - clean - Clean
  • Forcepoint ThreatSeeker - unrated - Clean
  • G-Data - clean - Clean
  • GCP Abuse Intelligence - unrated - Clean
  • Google Safebrowsing - clean - Clean
  • GreenSnow - clean - Clean
  • GreyNoise - unrated - Clean
  • Gridinsoft - unrated - Clean
  • Guardpot - unrated - Clean
  • Heimdal Security - clean - Clean
  • Hunt.io Intelligence - unrated - Clean
  • IPsum - clean - Clean
  • Juniper Networks - clean - Clean
  • K7AntiVirus - unrated - Clean
  • Kaspersky - unrated - Clean
  • LevelBlue - clean - Clean
  • Lionic - clean - Clean
  • Lumu - unrated - Clean
  • Malwared - clean - Clean
  • MalwarePatrol - clean - Clean
  • MalwareURL - unrated - Clean
  • Mimecast - unrated - Clean
  • Netcraft - unrated - Clean
  • OpenPhish - clean - Clean
  • PhishFort - unrated - Clean
  • Phishing Database - clean - Clean
  • PhishLabs - unrated - Clean
  • Phishtank - clean - Clean
  • PREBYTES - clean - Clean
  • PrecisionSec - unrated - Clean
  • Quick Heal - clean - Clean
  • Quttera - clean - Clean
  • Rising - clean - Clean
  • SafeToOpen - unrated - Clean
  • Sangfor - clean - Clean
  • Sansec eComscan - unrated - Clean
  • Scantitan - clean - Clean
  • SCUMWARE.org - clean - Clean
  • Seclookup - clean - Clean
  • Snort IP sample list - unrated - Clean
  • SOCRadar - unrated - Clean
  • Sophos - clean - Clean
  • StopForumSpam - clean - Clean
  • Sucuri SiteCheck - clean - Clean
  • ThreatHive - clean - Clean
  • URLhaus - clean - Clean
  • URLQuery - unrated - Clean
  • Viettel Threat Intelligence - clean - Clean
  • VIPRE - unrated - Clean
  • ViriBack - clean - Clean
  • VX Vault - clean - Clean
  • Webroot - clean - Clean
  • Xcitium Verdict Cloud - clean - Clean
  • Yandex Safebrowsing - clean - Clean
  • ZeroCERT - clean - Clean
  • ZeroFox - unrated - Clean

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.
  1. 1

    What the site claims

    The page presents itself as a service operating on voting-apyx.finance.

  2. 2

    What we observed

    The page content was captured and checked alongside 92 antivirus results.

  3. 3

    What independent research found

    No complete independent-research result was available in this saved report.

  4. 4

    What remains unverified

    5 of the five core capabilities did not complete, so those gaps remain visible in the coverage ledger.

crypto fraudphishingclone siteConfidence: High

Risk pattern correlation

Evidence correlation

Captured signals match known risk patterns

Strong pattern match

This view separates independent infrastructure evidence from pattern labels derived from the same captured page. Pattern matches add context, but they do not prove that the site belongs to a cross-domain scam network.

Correlation score
65/100
ClearLowModerateHighCritical
Evidence (2)
  • Evidence confirms this site is a clone of apyx.fi.
  • Domain is a typosquat of apyx.fi.
Correlated evidence (2)
Clone of apyx.fiTyposquat of apyx.fi

Scam-Type Likelihood

Scam-Type Likelihood

2 of 21 categories showed signals

Each card names a specific harm pattern and the concrete facts that support it. The category score is supporting context; the report verdict above remains the final severity decision.

Top match: Phishing
Phishing
Moderate likelihood
35/100
  • Domain is a typosquat of apyx.fi.
  • The evidence pattern matches phishing / data-harvesting.
Brand Impersonation
Moderate likelihood
35/100
  • Domain is a typosquat of apyx.fi.
  • The evidence pattern matches brand / clone-site impersonation.
19Show remaining categories
Crypto Fraud25/100
MalwareNot detected
Investment ScamNot detected
Fake ShopNot detected
Tech Support ScamNot detected
Scareware & Fake Pop-upsNot detected
Crypto Casino / Gambling ScamNot detected
Piracy Site — High-Risk AdsNot detected
Cracked Software — Malware RiskNot detected
Recovery / Refund ScamNot detected
Gaming ScamNot detected
Pig-Butchering / Romance-CryptoNot detected
Lottery / Prize ScamNot detected
Subscription TrapNot detected
Dropshipping / Low-Quality RetailNot detected
Deceptive Supplement FunnelNot detected
Fake Celebrity EndorsementNot detected
Fake GiveawayNot detected
Job / Task / Survey ScamNot detected

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗
Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

Domainvoting-apyx.finance
Redirects tovoting-apyx.finance
Hosted byCloudflare, Inc.
Referencesrepeg-apyxusd.com · fonts.reown.com

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers31.8672 97.9407
Postal addressPresent
Linked social profiles0
Signal Summary
Contact details look reasonable
  • No contact email found anywhere on the page.
  • Phone number listed (31.8672 97.9407).
  • Postal address visible on the page.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 8, 2026 (89d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://voting-apyx.finance/
  • 2200https://voting-apyx.finance/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

repeg-apyxusd.comfonts.reown.comdata-image-svg--base64.b-cdn.net

05 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result: 1 of 92 engines flagged
Completed
Adverse
Browser protection
Result: No browser threat-list match
Completed
No adverse finding
Page content
Result: Page fetched · HTTP 200
Completed
No adverse finding
Visual evidence
Result: No usable visual evidence was saved
Completed
No adverse finding
Independent research
Result: Independent research was not available for this report
Unavailable
Adverse

06 · Your Next Move

Your next move

Warning: phishing patterns

This page shows signs of attempting to steal credentials or impersonate a trusted brand.

  • Treat voting-apyx.finance as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • If you already typed your password — change it now

    Change the password on the legitimate site and anywhere else you re-used it. Turn on two-factor authentication. Review recent account activity.

  • Report the phishing URL

    APWG (Anti-Phishing Working Group) accepts phishing reports at reportphishing@apwg.org. Google Safe Browsing reports help protect other users.

    Open
  • Get help on the forum

    MalwareTips members can help you assess damage and next steps.

    Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Coinbase

Publicly-listed, regulated US exchange.

Kraken

Long-established, regulated exchange.

Gemini

Regulated US exchange & custodian.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final verdictLevel 4 of 5
28/100 safety

High Risk

Fake Apyx clone site using fake voting rewards to drain cryptocurrency wallets—confirmed crypto drainer scam.

This is a fake clone of the legitimate Apyx DeFi protocol designed to steal cryptocurrency. It impersonates the real apyx.fi with fraudulent "Genesis Vote" reward claims to trick users into connecting their wallets and draining their funds.

  1. 01

    Confirmed crypto drainer scam documented by PCRisk—uses fake 'Genesis Vote' governance claims to steal wallet funds.

  2. 02

    Typosquat and clone of legitimate Apyx protocol (apyx.fi); impersonates official governance voting interface.

  3. 03

    No business registration, no contact email, no verifiable connection to real Apyx team or protocol.

Do not visit this site or connect your wallet to it. This is a confirmed cryptocurrency drainer scam impersonating the legitimate Apyx protocol. If you have already connected your wallet, immediately transfer your funds to a new wallet and revoke all approvals from this domain in your wallet's security settings.
Evidence balance7 signals
Positive
3
Limited
1
Risk
3
Analysis coverage
78%
strong coverage
Core capabilities
0/5
completed checks
Source coverage
4/5
sources complete
Evidence checks
2/6
completed checks flagged
Safety range

Saved evidence only. Missing checks are never treated as a clean result.

Scan another URL

07 · Community

Community

0 community contributions

Share what happened, what the site requested, and what others should watch for.

Community reviews never change the scanner verdict.

Loading…
Loading comments…

08 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is voting-apyx.finance a scam or a legit website?
voting-apyx.finance looks like a likely phishing — do not enter your login or personal details. Our review tagged it for Crypto Drainer and Clone Site. 1 of 92 security engines flag it. It may not be an outright scam, but the risk is high enough that you should verify it independently before trusting it with money or data.
Is voting-apyx.finance safe to use?
voting-apyx.finance has a Safety Score of 28/100 (High Risk). Analysis coverage is strong at 78%. Avoid login, payment and downloads.
What should I do if I already gave my details to voting-apyx.finance?
If you've already paid or handed over details on voting-apyx.finance, act quickly. 1) Contact your bank or card issuer immediately and ask to dispute the charge or open a chargeback — the sooner you act, the better your odds. 2) Report the site to the U.S. FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov, and in the UK to Action Fraud at actionfraud.police.uk. 3) If you entered a password, change it on voting-apyx.finance and anywhere you reused it, and turn on two-factor authentication. 4) Watch your bank and email for follow-up fraud, and keep screenshots as evidence.
Can I get my money back from voting-apyx.finance?
Often yes, if you act fast. Payments made by credit or debit card can frequently be reversed through a chargeback or dispute — contact your bank right away and explain it was a fraudulent site. Bank transfers and gift-card or voucher payments are much harder to recover, but you should still report them to your bank and to the FTC (reportfraud.ftc.gov) or Action Fraud (actionfraud.police.uk). Avoid any "refund" or "recovery" service that contacts you first — it's usually a follow-up scam.
Did voting-apyx.finance steal my password or personal information?
If you entered anything on voting-apyx.finance, assume it was captured. Phishing pages exist purely to harvest what you type — usernames, passwords, card numbers, or one-time codes. Change the password immediately on the real site and anywhere you reused it, enable two-factor authentication, and if you entered card or banking details, contact your bank about the risk of fraud. Also be alert for follow-up "security" calls or emails that try to exploit the same information.
How do I report voting-apyx.finance?
You can report voting-apyx.finance through several official channels: the U.S. FTC at reportfraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and — in the UK — Action Fraud at actionfraud.police.uk. You can also flag it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so other browsers warn about it, and report it to the company being impersonated if there is one. Reporting helps get scam sites taken down faster.
Why does voting-apyx.finance look legitimate if it's a scam?
Modern scams are built to look convincing. A valid SSL padlock, a polished template, stock photos, fake reviews, and a trust badge can all be added in minutes and prove nothing about who runs the site. Scammers buy cheap domains, clone real designs, and copy legal pages wholesale. That's exactly why an automated review that checks the domain's age, hosting, blacklists, and behaviour — rather than just how the page looks — is more reliable than a first impression.
Has voting-apyx.finance been flagged by antivirus engines?
Yes. 1 of 92 antivirus and blocklist engines in our malware network flagged voting-apyx.finance as suspicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
Is voting-apyx.finance on any phishing or malware blacklists?
No — voting-apyx.finance is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
Does voting-apyx.finance have a valid SSL certificate?
Yes — voting-apyx.finance presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 89 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".
Where is voting-apyx.finance hosted?
voting-apyx.finance resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the voting-apyx.finance report updated?
This report is a record of the scan run on June 11, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about voting-apyx.finance has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.