dexrockets[.]com

This domain, www.dexrockets.com, is flagged as a brand impersonation threat targeting DexScreener, a widely used cryptocurrency analytics platform. Analysis indicates the site operated under the page title 'BUY DEXSCREENER ROCKETS | DexRockets,' suggesting an attempt to deceive users into purchasing non-existent or malicious tokens. The threat type aligns with known cryptocurrency scams, where attackers exploit brand recognition to lure victims into financial fraud schemes. No specific drainer kit signatures were identified in the available data, though the impersonation tactic remains consistent with token-based phishing campaigns. Infrastructure analysis reveals the domain was registered on July 18, 2024, through HOSTINGER operations, UAB, a registrar frequently associated with low-reputation domains. The domain resolves to the IP address 34.149.87.45, which has been linked to other suspicious activities in recent threat intelligence reports. Detection metrics show minimal coverage, with only 1 out of 95 security vendors flagging the domain on VirusTotal. Additionally, the domain appears on a single security blocklist, specifically PhishDestroy, and holds a Gridinsoft trust score of 0/100, indicating negligible legitimacy. No detections were recorded in Google Safe Browsing at the time of analysis. As of the latest assessment, www.dexrockets.com has been taken offline, reducing immediate exposure to potential victims. However, the domain's infrastructure remains intact, and similar campaigns may re-emerge under different domains or IPs. Users who interacted with the site are advised to revoke any connected wallet permissions and monitor accounts for unauthorized transactions. Organizations should update blocklists to include the domain and associated IP to mitigate residual risk. Continued vigilance is recommended, as threat actors often rotate infrastructure following takedowns.