dexvotings[.]com

Analysis of dexvotings.com indicates that the domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335). The domain resolves to the IP address 188.114.96.3, which is geolocated to the United States. Nameservers kipp.ns.cloudflare.com and maeve.ns.cloudflare.com confirm the use of Cloudflare DNS. No TLS certificate was observed, meaning the site operated without HTTPS.

The sole visible page title returned by the server is “Nur einen Moment…”, a German phrase meaning “Just a moment…”, which offers no indication of the intended victim audience or lure. Gridinsoft assigned a trust score of 0 out of 100, reflecting a lack of confidence in the site’s legitimacy. VirusTotal scans reported that six of ninety‑three security vendors flagged the domain, suggesting malicious activity. Independent blocklists have listed the domain, and it is currently blocked by PhishDestroy, MetaMask, and SEAL, confirming that at least three security services consider it hostile.

The site is presently offline, and the risk level has been classified as elevated. While the available data confirm the presence of phishing‑related infrastructure, the exact payload or credential‑stealing mechanism remains undisclosed because the page content was not captured. Defenders should continue to block traffic to 188.114.96.3 and to dexvotings.com at the network perimeter, update URL filtering and threat intelligence feeds with the domain and its associated IP, and monitor for any re‑hosting attempts that might use different Cloudflare IPs. Given the lack of SSL and the low trust score, any user‑initiated connections to this domain should be treated as malicious.