dragonx[.]cash

The domain dragonx.cash is a generic phishing domain that was taken offline after being flagged by security researchers. It does not impersonate any specific brand or use a known crypto drainer kit, but its purpose was to deceive visitors into providing sensitive information. The domain is currently inactive and returns a 'Site not found' error, but it was actively used for phishing attacks. Given its elevated risk level, users should treat any interaction with dragonx.cash as a potential security threat.

Technical indicators for dragonx.cash include detection by 2 of 95 VirusTotal vendors, specifically Gridinsoft and SOCRadar, and it appears on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on February 21, 2026, at 07:01:08 UTC, and resolves to IP address 63.176.8.218, which is located in Germany (DE) under AS16509 Amazon.com, Inc. The SSL certificate was issued by DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1, and the site was hosted on Netlify. The observed page title was 'Site not found' and the HTTP status was 404. Google Safe Browsing did not flag the domain.

Users who may have visited dragonx.cash should immediately change any passwords entered on the site and enable two-factor authentication on their accounts. If any cryptocurrency wallet interactions occurred, revoke all token approvals and move funds to a new wallet. Report the domain to security blocklists and local law enforcement if financial loss occurred. Monitor accounts for unauthorized activity and consider running a security scan on affected devices.