# rexcon.xyz — SUSPICIOUS

> rexcon.xyz is a live crypto drainer scam discovered today. It impersonates a login portal and has 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies rexcon.xyz as an active fake-login crypto drainer impersonating a branded portal. The domain is currently under investigation and remains live at the time of this report.    This domain was flagged by 0 of 95 VirusTotal security vendors, registered through Cloudflare, Inc. on December 02, 2025, and resolves to IP 216.198.79.1. It holds a Let’s Encrypt SSL certificate and has no confirmed entries in public blocklists as of this evaluation.    Until further analysis confirms mitigation, users are advised to avoid visiting rexcon.xyz and to verify any linked login pages using PhishDestroy’s real-time scanner. Exercise heightened caution with any cryptocurrency-related login prompts and enable wallet transaction previews to detect unauthorized transfers immediately.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-02 13:38:20
- Registrar: Cloudflare, Inc.
- IP: 216.198.79.1

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/97a63c94-9113-4199-93fb-5c90f9624f7c
- PhishDestroy: https://phishdestroy.io/domain/rexcon.xyz/
- LLM endpoint: https://phishdestroy.io/domain/rexcon.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rexcon.xyz/
Last updated: 2026-03-31