dexholdergate[.]app

The domain dexholdergate.app is classified as a high-risk generic phishing domain. It appears to be targeting users interested in decentralized exchange (DEX) platforms, possibly mimicking a legitimate DEX screening service to lure victims. No specific brand or drainer kit has been identified, but the domain's infrastructure and behavior suggest a sophisticated phishing operation.

Analysis indicates that dexholdergate.app has a VirusTotal detection score of 2/95, suggesting that while it is flagged by a minority of security vendors, it may still pose a significant threat. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 172.67.139.199, which is located in CA and is associated with Cloudflare, Inc. The domain was created on May 18, 2026, and currently appears on 3 security blocklists. The SSL certificate is issued by Let's Encrypt, which is a common choice for phishing sites due to its free and automated issuance process.

The domain remains active as of the latest assessment. Given its presence on multiple blocklists and the low detection rate by security vendors, users are advised to exercise extreme caution when encountering this domain. Organizations should update their security filters and blocklists to include this domain. The remaining risk is high, particularly for users who are not familiar with the signs of phishing attacks or who may be targeted through social engineering techniques.