# dexcsreener.cc — MALICIOUS

> Beware of dexcsreener.cc, a phishing domain mimicking DEX Screener. Learn how it operates and why it’s risky before interacting.

## Summary
PhishDestroy has identified dexcsreener.cc as a medium-risk generic phishing domain. The site, which presented itself with the page title "DEX Screener - Portfolio," likely aimed to deceive users by impersonating a legitimate cryptocurrency portfolio tracking service. The primary threat involves credential theft or data harvesting from unsuspecting visitors.

Technically, dexcsreener.cc resolved to the IP address 172.67.149.124 and was registered on February 21, 2026. It appeared on two separate security blocklists and was flagged by 6 out of 95 VirusTotal antivirus engines, indicating a moderate detection rate. The domain's infrastructure and behavior suggest typical phishing tactics, leveraging a familiar brand name to lure victims.

Currently, dexcsreener.cc is offline, reducing immediate risk. However, users should remain vigilant as similar phishing domains may emerge. It is recommended to avoid interacting with suspicious domains resembling trusted services, verify URLs carefully, and use security tools to detect potential phishing threats. Reporting any suspicious activity related to dexcsreener.cc to cybersecurity authorities can help mitigate further risk.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: DEX Screener - Portfolio

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 172.67.149.124
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["coby.ns.cloudflare.com", "stevie.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a6ea3-1358-723e-b7ab-2259dffe1823.png
- PhishDestroy: https://phishdestroy.io/domain/dexcsreener.cc/
- LLM endpoint: https://phishdestroy.io/domain/dexcsreener.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dexcsreener.cc/
Last updated: 2026-03-19