v2-dexscreener[.]cc

This domain, v2-dexscreener.cc, poses a brand impersonation threat specifically targeting users of the legitimate cryptocurrency analytics platform Dexscreener. The site attempts to deceive visitors by mimicking the appearance and functionality of the real Dexscreener, potentially tricking users into connecting wallets or entering sensitive information. Such impersonation often precedes crypto drainer attacks or credential theft, where victims may lose funds or access to their digital assets without immediate detection. Analysis indicates the domain is highly suspicious based on multiple technical indicators. The domain was registered on November 27, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious infrastructure. At the time of assessment, 18 out of 95 security vendors on VirusTotal flagged v2-dexscreener.cc as malicious, and it appears on two security blocklists, including PhishDestroy and PhishingDB. The domain resolves to IP address 104.21.66.65, hosted on Cloudflare’s network (AS13335), and currently lacks an SSL certificate, further reducing its legitimacy. The server returns a 520 error, suggesting the site may have been taken offline or is experiencing backend issues. If you visited v2-dexscreener.cc, immediate action is recommended to mitigate potential risks. Disconnect any wallets or accounts linked to the site and revoke any suspicious permissions granted to decentralized applications. Monitor connected wallets for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Change passwords for any accounts where credentials may have been entered, and enable multi-factor authentication where available. Users should also report the domain to their security software provider or relevant threat intelligence platforms to aid in broader detection efforts.