dexofinanceglob[.]com

The domain dexofinanceglob.com is flagged as a generic phishing site, posing a significant risk to users. It appears to mimic a legitimate financial brand, potentially aiming to deceive individuals into providing sensitive information or engaging in fraudulent transactions. While no specific drainer kit has been identified, the domain's structure and content suggest it is designed to impersonate a reputable financial service provider, enhancing its credibility and increasing the likelihood of user deception.

Technical analysis reveals that the domain has been flagged by 2 out of 95 security vendors on VirusTotal, indicating some level of suspicion among the cybersecurity community. The domain is registered through OwnRegistrar, Inc., and resolves to the IP address 198.251.84.200. It was created on June 12, 2025, and utilizes an SSL certificate from Let's Encrypt. The domain is currently listed on one security blocklist, and its detection by Google Safe Browsing (GSB) is unknown. These technical indicators suggest that the domain has been used for malicious activities and has been identified by at least a few security solutions.

The domain is currently offline, which may indicate that it has been taken down by the registrar or as a result of takedown efforts by security organizations. Despite its offline status, the risk remains elevated due to the potential for the domain to be reactivated or for similar domains to be registered by the same threat actors. Users are advised to remain vigilant and avoid engaging with any communication or links related to this domain. Organizations should update their threat intelligence databases and monitor for any related activity to ensure ongoing protection.