# dexriumswap.com — SUSPICIOUS

> dexriumswap.com is a fake crypto drainer site with 0/95 VirusTotal detections. It impersonates a legitimate crypto platform to steal funds.

## Summary
PhishDestroy identifies dexriumswap.com as a newly active crypto drainer posing as a legitimate decentralized exchange. The domain was registered on December 05, 2025, through GoDaddy.com, LLC, and resolves to IP address 5.161.227.21. No antivirus engines currently detect this threat (0/95 on VirusTotal), indicating it is still under the radar of most security tools.  This domain exhibits classic phishing characteristics aligned with crypto drainer campaigns. The site likely employs fake wallet connection prompts or fraudulent transaction approvals to siphon cryptocurrency from unsuspecting users. The use of a Let's Encrypt SSL certificate suggests an attempt to appear legitimate, while the recent creation date and low detection rate indicate it may be a newly deployed threat actively targeting crypto investors. Technical indicators such as the domain’s age and hosting infrastructure further support its malicious intent, though additional behavioral analysis is required to confirm specific drainer mechanisms.  If you visited dexriumswap.com or entered any information, stop all transactions immediately. Disconnect your wallet from any dApps and revoke any suspicious token approvals using tools like revoke.cash. Scan your device with reputable antivirus software and consider transferring remaining assets to a new, secure wallet. Report the domain to PhishDestroy and your local cybersecurity authority to help protect others from this threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-05 10:15:44
- Registrar: GoDaddy.com, LLC
- IP: 5.161.227.21

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/dexriumswap.com
- PhishDestroy: https://phishdestroy.io/domain/dexriumswap.com/
- LLM endpoint: https://phishdestroy.io/domain/dexriumswap.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dexriumswap.com/
Last updated: 2026-04-10