# dexscreener.co.com — MALICIOUS

> dexscreener.co.com mimics the legitimate DexScreener platform and poses as a cryptocurrency exchange tracker while pushing generic drainer malware.

## Summary
PhishDestroy identifies dexscreener.co.com as an active, elevated-risk fake cryptocurrency analytics site that lures victims by mimicking the legitimate DexScreener brand. The domain was flagged as a generic phishing page designed to harvest wallet credentials or push drainer malware kits to unsuspecting cryptocurrency traders. No specific drainer kit fingerprint (e.g., Inferno Drainer, Venom Drainer) was publicly attributed at the time of analysis, suggesting either a newly deployed or repurposed malware family.

Technical analysis reveals additional red flags: VirusTotal reports a 14/95 detection ratio from security vendors, indicating partial but not universal recognition of malicious intent. The domain resolves to IP 188.114.97.3 and was created recently, though the exact creation date was not provided. Google Safe Browsing (GSB) has not flagged this domain, which is unusual for confirmed malicious sites—possibly due to recent deployment. The domain is currently blocked by MetaMask and SEAL, and appears on two public blocklists, reinforcing its malicious classification. The use of Google Trust Services for the SSL certificate is a technique to lend false legitimacy to the phishing page.

As of the latest intelligence, dexscreener.co.com remains active and poses an elevated ongoing risk to cryptocurrency users. Security vendors and browser extensions such as MetaMask continue to block access, though the site may persist in phishing campaigns via social media, fake ads, or impersonated links. Users are strongly advised to avoid visiting the domain, verify URLs before entering credentials, and use hardware wallets or transaction simulation tools. The remaining risk is moderate due to active blocking measures, but new variants or related domains may emerge. Cryptocurrency investors should remain vigilant for spoofed analytics platforms and confirm site authenticity via official channels only.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/954e2f33-e430-467e-bd99-5b2bd9953e1a
- PhishDestroy: https://phishdestroy.io/domain/dexscreener.co.com/
- LLM endpoint: https://phishdestroy.io/domain/dexscreener.co.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dexscreener.co.com/
Last updated: 2026-03-26