vote-dexscreener[.]fun

This domain, vote-dexscreener.fun, poses as a decentralized exchange (DEX) voting platform but operates as a crypto drainer. Users lured to this site under the pretense of participating in governance votes or token distributions risk having their connected wallets drained of funds through malicious smart contract interactions. The site specifically targets cryptocurrency holders familiar with DEX platforms by mimicking legitimate voting interfaces, making it particularly deceptive to users expecting to engage with governance features. Analysis indicates this is a high-risk threat with multiple technical indicators confirming its malicious nature. The domain was registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with phishing infrastructure. Security vendors on VirusTotal flagged this domain with 13 out of 95 detections, including classifications as a crypto drainer. The site appears on three security blocklists and was proactively blocked by wallet security systems. Infrastructure analysis reveals the domain resolves to IP address 172.67.188.176, a common hosting range for fraudulent sites, and uses a Google Trust Services SSL certificate to appear legitimate. If a user visited vote-dexscreener.fun and connected a wallet or interacted with any on-page elements, immediate action is required. First, disconnect the wallet from any dApps or sites listed in its connected apps section. Revoke all token approvals using a blockchain explorer or revocation tool to prevent further unauthorized transactions. Monitor the wallet for any unexpected activity and consider transferring assets to a new wallet if suspicious transactions are detected. Users should also scan their devices for malware, as some crypto drainers deploy additional payloads. Report the incident to relevant security teams and consider sharing transaction hashes with blockchain analysis platforms to help track the attacker's movements.