Is dexscreener-votes.com a scam? TrustSniffer's high-risk assessment: 9/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website operates from a recently created domain that pairs the name of a well-known crypto market-screening brand with the word "votes". Its homepage, a short single page of roughly one thousand characters, carries the title "DexScreener". It shows no products, pricing or operator details beyond that brand-styled presentation. This naming pattern is typical of lookalike pages that borrow a recognised crypto brand to draw visitors into voting, promotion or wallet-linked interactions. Its apparent purpose therefore cannot be tied to any independently identifiable business.

Scam/Impersonation Risk

Confirmed contradictions are present. Multiple independent threat-intelligence engines flag the domain as malicious or suspicious, including a top-tier security vendor, and the combined detections amount to a confirmed blacklist position. Separate historical intelligence also associates the domain with known phishing activity. A name that adopts an established crypto brand title and adds a "votes" suffix on a domain only weeks old fits the profile of a brand-lookalike operation. No on-site evidence yet shows what the page does with visitors. The behavioural sandbox saw no wallet-connection attempts, clipboard manipulation, hidden or external-posting forms, cloaking or console errors across three successful runs. It did record a very high share of externally sourced page resources, but no third-party data submissions. These clean behavioural results do not offset the reputation findings, because a lookalike page can be switched to a malicious payload without notice. The hosting address also carries a small number of recent abuse reports. These apply to shared provider infrastructure and are not attributed to this site specifically, so they are a soft contextual signal only. No conflicting legal identities were found. Evidence:

• Homepage: the page title presents the brand name "DexScreener" on a differently named, hyphenated domain.
• Domain registration: created in 2026, about 79 days (~0.22 years) old at the time of analysis.
• External reputation: two security engines rate the domain malicious and one rates it suspicious, and a blacklist hit is recorded.
• Hosting address: 5 abuse reports on file, the most recent about one day before analysis, attributed to shared provider infrastructure.

Regulatory Verification Notes

The captured page establishes no operator name, legal entity, licence or registration reference, and the real-world identity behind the site could not be independently connected to any brand or person. Registration details are incomplete and show ownership opacity. Governance transparency is weak, but that is a separate matter from the reputational findings above and is not treated here as proof of wrongdoing. No regulatory standing is evidenced for any financial or trading-related activity, and no broker-reputation record matches the domain. The site presents only a standard domain-validated transport certificate and a registrar-level registration, neither of which says anything about who runs it. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-08-09 (a one-year term).
• TLS certificate: issued by YR1 (DV, domain-validated only), valid to 2027-01-16 with 81 days remaining.
• Hosting: served from AS399629 (BL Networks, US).
• Homepage: no company name, licence number or legal pages were evidenced in the captured content.

What to Verify Next

Any claim of affiliation with the genuine brand should be tested by reaching that brand only through its officially published channels, typed or bookmarked independently, and confirming whether it recognises this domain. The origin of any link that led to the site, such as a social post, message or advertisement, should be traced and treated as suspect until validated. If the site is later claimed to offer regulated financial or trading services, the named operator should be checked against the relevant licensing registry. The official support channels should be confirmed through an independent, offline route. Evidence:

• Homepage: the brand-styled title is the only identity claim and needs confirmation from the genuine brand's own channels.
• Domain: its recent creation date means no long operating record exists to corroborate any affiliation.
• Reputation findings: the listings noted above should be re-checked after any claimed remediation.

Summary Verdict

The available evidence supports an elevated-risk posture. Confirmed threat-intelligence detections, a very young domain and an unestablished operator identity converge on a site that cannot be treated as legitimate. Clean sandbox behaviour and a valid certificate are mitigating details only and do not change this conclusion.

Infrastructure Integrity

The site sits behind a Cloudflare CDN/WAF layer, and the only observed address is an edge address on a US hosting provider's network (BL Networks). The origin server was not observable, so the hosting cannot be independently verified, and content could be swapped quickly behind the edge. The young domain's thin DNS footprint and sparse subdomain structure are unconfirmed heuristics that point the same way. The protective infrastructure mitigates exposure at the network level, but it is not evidence of legitimacy and cannot offset the reputation risk.

Closing Assessment

Interaction with the site should be limited to passive, read-only viewing, preferably from an isolated browser environment. Wallet connections, credential entry, account login and any payment or token approval should be avoided entirely until the genuine brand confirms the domain and the external listings are cleared.

Signals weighed against the site

• AbuseIPDB: 5 reports on hosting IP 64.111.93.27 (BL Networks, Data Center/Web Hosting/Transit), 2% confidence. The reports are attributed to shared infrastructure, not specifically to this website.