dexscreener[.]co[.]com

PhishDestroy identifies dexscreener.co.com as an active, elevated-risk fake cryptocurrency analytics site that lures victims by mimicking the legitimate DexScreener brand. The domain was flagged as a generic phishing page designed to harvest wallet credentials or push drainer malware kits to unsuspecting cryptocurrency traders. No specific drainer kit fingerprint (e.g., Inferno Drainer, Venom Drainer) was publicly attributed at the time of analysis, suggesting either a newly deployed or repurposed malware family.

Technical analysis reveals additional red flags: VirusTotal reports a 14/95 detection ratio from security vendors, indicating partial but not universal recognition of malicious intent. The domain resolves to IP 188.114.97.3 and was created recently, though the exact creation date was not provided. Google Safe Browsing (GSB) has not flagged this domain, which is unusual for confirmed malicious sites—possibly due to recent deployment. The domain is currently blocked by MetaMask and SEAL, and appears on two public blocklists, reinforcing its malicious classification. The use of Google Trust Services for the SSL certificate is a technique to lend false legitimacy to the phishing page.

As of the latest intelligence, dexscreener.co.com remains active and poses an elevated ongoing risk to cryptocurrency users. Security vendors and browser extensions such as MetaMask continue to block access, though the site may persist in phishing campaigns via social media, fake ads, or impersonated links. Users are strongly advised to avoid visiting the domain, verify URLs before entering credentials, and use hardware wallets or transaction simulation tools. The remaining risk is moderate due to active blocking measures, but new variants or related domains may emerge. Cryptocurrency investors should remain vigilant for spoofed analytics platforms and confirm site authenticity via official channels only.