coin-dexscreener[.]com

coin-dexscreener.com has been identified as a crypto drainer domain under active investigation by PhishDestroy. This domain specifically impersonates CoinGecko, a well-known cryptocurrency market data aggregator, to deceive users into connecting their wallets or divulging sensitive credentials. The threat remains active and is currently categorized as a generic phishing vector with a risk level under investigation pending further analysis.

This domain was flagged by 3 of 95 VirusTotal vendors as of the latest scan, indicating no current detections despite its malicious intent. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP address 172.67.185.174, and holds a valid SSL certificate issued by Let's Encrypt. The domain was created on April 24, 2026, which is notably recent, suggesting a hastily deployed operation. Trust scores for this domain remain unverified due to its lack of historical data, further emphasizing the need for immediate scrutiny.

As this domain is active and poses a credible threat to users seeking cryptocurrency market data, PhishDestroy recommends blocking coin-dexscreener.com at the network and endpoint levels. Implement DNS sinkholing or firewall rules to prevent access, and alert users to avoid interactions with this domain. Additionally, monitor for any outbound connections to the resolved IP (172.67.185.174) as a potential indicator of compromise. Given the absence of VirusTotal detections, manual review and proactive blocking are critical to mitigating potential risks.