dexscreener-dexscreener[.]github[.]io

This domain is a targeted crypto brand impersonation scam designed to deceive decentralized exchange (DEX) traders. The site mimics the legitimate Dexscreener platform, a widely used tool for tracking DEX activity, by replicating its branding, interface, and functionality. Analysis indicates the threat actors aim to distribute crypto drainer scripts or harvest wallet credentials, enabling unauthorized transactions and asset theft from victims' connected wallets. The domain was structured to appear as an official extension or mirror of the real service, increasing the likelihood of successful social engineering attacks against cryptocurrency users. Technical evidence confirms the malicious nature of this domain. VirusTotal shows 1 out of 95 security vendors flagged the domain, a low detection rate likely due to its recent deployment and use of legitimate infrastructure. The domain resolves to 185.199.109.153, an IP associated with GitHub Pages, and is registered through GitHub, Inc., leveraging free hosting services to reduce operational costs. It appears on one security blocklist, and the SSL certificate is issued by Let's Encrypt, providing a false sense of security. The page title, 'Dexscreener: The Ultimate Tool for DEX Traders,' directly impersonates the legitimate platform, reinforcing the deception. Users who visited dexscreener-dexscreener.github.io should take immediate action to mitigate potential risks. Disconnect any wallets or browser extensions linked to the site and revoke permissions for all connected decentralized applications (dApps). Scan the device for malware using updated security tools, as crypto drainers may deploy additional payloads. Monitor wallet transactions for unauthorized activity and transfer assets to a new, secure wallet if compromise is suspected. Report the domain to relevant security communities and crypto platforms to prevent further exploitation. Exercise caution with similar domains, particularly those hosted on GitHub Pages or other free services, and verify official URLs through trusted sources before interaction.