voltrwa[.]claims

PhishDestroy identifies voltrwa.claims as a brand impersonation threat specifically targeting dexscreener, a popular decentralized exchange data platform. The domain was set up to deceive users into believing they are interacting with a legitimate dexscreener interface, potentially to harvest credentials or trick victims into connecting wallets. The page title '$XVM - VOLT | Supercharging the Next Generation of RWA on XRP' adds a layer of social engineering by promoting a fake token project.

Technical indicators paint a clear picture of risk. VirusTotal reports 4 out of 95 security vendors flagging the domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 104.21.43.169, which is associated with Cloudflare. Its SSL certificate is issued by Google Trust Services (WE1). It appears on two security blocklists, though Google Safe Browsing status is not provided. The domain was registered recently, a common trait of phishing campaigns.

Currently, the domain is offline, which means the immediate threat is contained. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends that anyone who visited voltrwa.claims or entered credentials should change passwords and revoke any wallet permissions immediately. The remaining risk is that the threat actors may reuse the same infrastructure or templates under new domains.