dexscreener-lists[.]xyz

This domain is flagged as a high-risk crypto drainer specifically designed to impersonate DexScreener, a legitimate cryptocurrency analytics platform. Analysis indicates the site employs deceptive tactics to harvest wallet credentials and drain digital assets from unsuspecting users, a threat type confirmed by multiple security mechanisms detecting malicious intent tied to cryptocurrency theft. Infrastructure analysis reveals the domain www.dexscreener-lists.xyz was registered through Porkbun, LLC on April 18, 2024, and resolves to the IP address 216.150.1.193. The site is detected by 12 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on four security blocklists and is actively blocked by MetaMask, PhishDestroy, SEAL, and ScamSniffer. The SSL certificate is issued by Let’s Encrypt, and the site utilizes Vercel hosting with HSTS enabled, which may lend a false sense of legitimacy to users. To mitigate risks associated with this crypto drainer, users should immediately cease interaction with the domain and revoke any wallet permissions granted to it. It is recommended to verify the authenticity of cryptocurrency platforms by cross-referencing official domains and checking for security warnings from wallet providers or threat intelligence feeds. Enabling transaction simulation tools and multi-factor authentication for wallet access can further reduce exposure to such threats. Organizations should update blocklists to include this domain and its associated IP address to prevent internal access.