ranking-dexscreener[.]net

PhishDestroy identifies ranking-dexscreener.net as a suspected crypto drainer domain actively impersonating DexScreener, a widely used tool for tracking cryptocurrency trading pairs and liquidity pools on decentralized exchanges. This domain was flagged under the generic phishing threat category and is currently under investigation for potential malicious activity involving unauthorized fund transfers. The site likely leverages fake interfaces to trick users into connecting their crypto wallets and signing malicious transactions that drain assets to attacker-controlled addresses. This domain resolves to IP address 104.21.5.216 and was created on April 30, 2026. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses a Let's Encrypt SSL certificate to appear legitimate. VirusTotal currently shows 2 out of 95 detection engines flagging the domain, indicating it has not yet been widely recognized as malicious. As of the latest analysis, the domain remains active and unblocked by major security vendors, including Google Safe Browsing. The current status of ranking-dexscreener.net is classified as active with an under_investigation risk level. Immediate response includes blocking the domain at the network and endpoint levels, and users should avoid accessing the site or interacting with any associated links. While the immediate risk is elevated due to the domain's recent creation and low detection rate, ongoing monitoring and threat intelligence sharing are essential to prevent potential financial losses. The lack of detections suggests a possible zero-day threat, emphasizing the need for proactive security measures and user awareness in the crypto ecosystem.