VirusTotal
2 / 93
dexvoting.website — İçerik kullanılamıyor. Dolandırıcılık türü: Banking Phishing. Kanıt özeti: VirusTotal 2/93 (Gridinsoft, SOCRadar); URLQuery 1 alert; 1 external blocklist match (ScamSniffer); PhishDestroy score 65/100. Kayıt kuruluşu: Hostinger.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | dexvoting.website |
malicious | Sinkholed |
The domain dexvoting.website is a generic phishing site designed to steal user credentials, specifically targeting banking-related login information. It does not impersonate a known brand or use a recognized drainer kit. As of the latest verification, dexvoting.website has been taken offline, reducing immediate risk but not eliminating the potential for future malicious activity.
Technical analysis shows that dexvoting.website was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar. The domain was registered through HOSTINGER operations, UAB, on February 21, 2026, and resolved to the IP address 84.32.84.207, hosted by Hostinger International Limited in Lithuania. It appears on 4 security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. No SSL certificate was issued for the domain, and its nameservers are ns1.dns-parking.com and ns2.dns-parking.com. The HTTP status returned was 200, indicating an active page before takedown.
Users who may have interacted with dexvoting.website should immediately change any banking or financial credentials entered on the site. Enable two-factor authentication (2FA) on all sensitive accounts to prevent unauthorized access. Monitor bank statements and transaction histories for signs of fraudulent activity. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, and consider submitting the URL to Google Safe Browsing or other security platforms to aid in broader protection efforts.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='dexvoting.website', port=80): Max retries exceeded with url: / (Caused by NewConnectionErr
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns1.dns-parking.comns2.dns-parking.comLocation describes the IP network.
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 topluluk üyesi tarafından bildirildi; ilk görülme 18.01.2026
PD-1769262363-dexvoting.websi Recipient: abuse@hostinger.com Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin