dexscreener-io[.]github[.]io

Analysis indicates that the sub‑domain dexscreener‑io.github.io was registered on 1 August 2025 through GitHub, Inc. and is currently hosted on Fastly infrastructure (ASN 54113) with an IPv6 address 2606:50c0:8002::153 located in the United States. The site serves HTTP 200 responses and presents the page title “DEXScreener | Track your DEX Trades”, suggesting an attempt to mimic the legitimate DEX analytics service. A Let’s Encrypt R12 certificate protects the site, but the certificate does not authenticate the underlying content. The domain has been flagged by multiple blocklists, including MetaMask, PhishDestroy, and SEAL, and appears on one additional security blocklist. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The listed scam type is “Crypto Scam” and the threat is classified as brand impersonation targeting an unspecified “across” audience. Nameserver information is unavailable. While the site resolves correctly and returns a successful HTTP status, the combination of brand‑impersonating title, low trust score, and blocklist listings warrants immediate mitigation. Defenders should add the IPv6 address and the full host name to network deny lists, enforce DNS filtering for the domain, and monitor for related traffic toward Fastly edge nodes. Continued observation is recommended to confirm any payload delivery or credential‑phishing activity.