dextrendvotes[.]com

This domain, dextrendvotes.com, is identified as a cryptocurrency phishing site designed to deceive users into disclosing wallet credentials or authorizing fraudulent transactions. The site mimics legitimate decentralized platforms, presenting users with fake login or transaction approval interfaces that capture sensitive data such as private keys, seed phrases, or session tokens. Once obtained, attackers can drain digital assets from compromised wallets without further interaction from the victim. The threat primarily targets users of blockchain-based applications, particularly those interacting with decentralized finance (DeFi) or non-fungible token (NFT) platforms. Analysis indicates that dextrendvotes.com was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The domain currently resolves to the IP address 104.21.3.238, a Cloudflare proxy endpoint commonly used to obscure hosting infrastructure and evade takedown efforts. Detection engines on VirusTotal flagged the domain in 3 out of 95 security scans, while independent trust assessments assign it a score of 0 out of 100. The site appears on four security blocklists and is actively blocked by multiple wallet security tools, including transaction monitoring systems that detect and prevent malicious approvals. Users who have visited dextrendvotes.com or interacted with its content should immediately revoke any suspicious wallet approvals or connected applications. Disconnect the wallet from all decentralized applications (dApps) and conduct a full security audit of recent transactions. If credentials or seed phrases were entered, transfer all assets to a new, secure wallet and monitor the compromised wallet for unauthorized activity. Report the domain to relevant security communities and consider notifying the registrar, NiceNIC International Group Co., Limited, with evidence of malicious use to support enforcement actions. Proactive monitoring of similar domains with recent creation dates and low detection counts is recommended to mitigate further exposure.