xn--dexscreenr-zmb[.]com

On 25 July 2026 the domain xn--dexscreenr-zmb.com was observed as an offline phishing infrastructure. The domain was registered on 21 February 2026 through Dynadot LLC, a registrar known for low‑cost registrations. DNS resolution points to the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net, which are typical of Dynadot‑hosted zones. The sole page title retrieved from the site, “dexscreenėr.com”, does not match the punycode domain and suggests a possible attempt to masquerade a legitimate brand, although no brand is explicitly identified in the intelligence.

VirusTotal analysis shows that three out of ninety‑three scanning engines flagged the domain, indicating a modest level of malicious confidence across the vendor ecosystem. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one trusted phishing mitigation service has taken action against it. No additional reputation services, Safe Browsing checks, or Open Threat Exchange entries are currently recorded for this FQDN.

The lack of active HTTP responses (status: taken offline) limits further behavioral observation, and no SSL certificate or IP address data have been disclosed, leaving the hosting environment uncharacterized. Defenders should add xn--dexscreenr-zmb.com to internal block lists, monitor for any resurgence of the domain or its name‑server infrastructure, and consider expanding detection rules to flag any future resolution to the same name servers. Continuous re‑query of public reputation sources is advised to capture any new indicators that may emerge as the threat actor re‑activates the infrastructure.