list-dexscreener[.]com

The domain www.list-dexscreener.com has been flagged as an active crypto drainer mimicking DexScreener, with its infrastructure still under review. This malicious site leverages brand impersonation to trick users into connecting crypto wallets, enabling unauthorized asset transfers. Given its low-risk classification but active status, organizations should treat it as a high-priority threat until further analysis confirms its exact payload or distribution vectors.

PhishDestroy identifies this domain as a generic phishing campaign with crypto drainer capabilities, currently evading detection with zero VirusTotal engines (1/95) as of its last scan. The domain resolves to IP 216.150.16.65 and was registered on April 09, 2026, via OwnRegistrar, Inc., using a Let’s Encrypt SSL certificate. No blocklist entries or threat intelligence reports currently flag this domain, suggesting it may be newly operational or operating under the radar. Trust scores for the IP and registrar remain unassessed at this stage, warranting heightened scrutiny.

To mitigate risks, SOC teams should immediately block the domain and IP (216.150.16.65) at the network perimeter while inspecting DNS logs for anomalous resolutions. Users should be warned against interacting with any DexScreener impersonation links, especially those hosted on list-dexscreener.com. Additionally, monitor wallet activity for unauthorized transactions linked to this domain’s campaign. If this domain is encountered in phishing emails or social engineering lures, report it to relevant threat intelligence platforms and consider it a confirmed crypto drainer until proven otherwise.