dexscreener[.]us[.]com

On 24 July 2026 analysts observed the domain dexscreener.us.com serving a brand‑impersonation campaign identified by the page title “DEX Screener – Docs”. DNS resolution points to the IPv4 address 91.92.241.15, which belongs to the NL‑based network operated by Omegatech LTD (AS202412). The authoritative name servers are ns1.virtualine.org and ns2.virtualine.org. Registration data shows the domain was created through METASPINNERNET (ASN 209800).

No TLS certificate is presented, indicating the site is served only over HTTP. The domain has been taken offline, and PhishDestroy reports it as blocked; it also appears on a single security blocklist. Gridinsoft’s trust score assigns a value of 0 out of 100, reflecting a high‑risk assessment. VirusTotal indicates the domain was scanned by 95 antivirus engines without any detections, but the absence of flags does not constitute proof of legitimacy.

The limited visibility—only one blocklist entry, no SSL, and a single observed page title—leaves uncertainty regarding the full scope of the impersonation kit and whether additional infrastructure exists. Defenders should immediately add dexscreener.us.com to network deny lists, enforce DNS filtering, and monitor for any resurgence of the host or related sub‑domains. Continuous re‑scanning on multi‑engine platforms is recommended, as is correlation with any traffic that attempts to resolve the same IP or name‑server pair. Given the 0/100 trust score and the brand‑impersonation classification, a precautionary block is advised until further intelligence becomes available.