votes-dexscreener[.]net

PhishDestroy identifies the domain votes-dexscreener.net as an active crypto drainer impersonating the legitimate DexScreener platform, a popular tool used by cryptocurrency traders to track token prices and trading volumes. This domain is currently under investigation and has been confirmed as a threat vector for cryptocurrency theft through deceptive redirection and fake transaction interfaces. Users interacting with this domain risk unauthorized fund drains from their wallets, as the infrastructure is designed to mimic legitimate services while exfiltrating private keys or transaction approvals.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating a low detection rate despite its malicious intent. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting numerous suspicious domains. The domain resolves to IP address 172.67.143.30, a Cloudflare infrastructure IP, and was created on April 26, 2026, suggesting a recently deployed threat. The domain’s SSL certificate, issued by Let’s Encrypt, provides a false sense of security but does not validate its legitimacy. Given the lack of blocklist entries and VirusTotal detections, this domain represents an emerging threat that requires immediate attention from security researchers and end-users.

The current status of votes-dexscreener.net remains active, with no active takedown or blocklisting observed at this time. Security researchers should monitor this domain for changes in infrastructure or payload delivery mechanisms. Users are strongly advised to avoid interacting with this domain or any subdomains associated with it. To mitigate risk, verify URLs through official sources before accessing cryptocurrency-related services, use hardware wallets for transactions, and enable transaction simulation tools to detect unauthorized fund drains. Consider reporting this domain to threat intelligence platforms such as PhishDestroy, VirusTotal, or local cybersecurity authorities to aid in its identification and potential blacklisting.