votedexscreener[.]app

This domain, votedexscreener.app, is identified as a crypto credential theft operation impersonating the legitimate Dexscreener platform. Analysis indicates the site mimics Dexscreener’s voting interface to deceive users into entering wallet credentials or approving malicious transactions, likely leading to unauthorized token transfers or account takeovers. No specific drainer kit signatures were observed, but the use of modern JavaScript frameworks suggests a tailored phishing kit designed for cryptocurrency targets. Infrastructure analysis reveals the domain was registered on February 21, 2026, and resolves to the IP address 188.114.96.3. It is flagged by 4 out of 95 security vendors on VirusTotal and appears on three independent blocklists, including entries from cryptocurrency-focused security platforms. The domain was hosted behind Cloudflare, utilizing Node.js, Vue.js, and Nuxt.js, with HTTP/3 support, indicating a professionally configured phishing infrastructure designed to evade detection and enhance performance. As of the latest verification, votedexscreener.app has been taken offline, likely in response to blocklist inclusions and security vendor detections. However, residual risk remains due to the domain’s recent creation date and the potential for operators to redeploy the infrastructure under a new domain or IP. Users who interacted with the site are advised to revoke any suspicious token approvals, monitor wallet activity for unauthorized transactions, and verify the authenticity of any Dexscreener-related communications before engaging with them.