dexsport[.]app

This domain, dexsport.app, is flagged as an active brand impersonation threat targeting Binance, a major cryptocurrency exchange. Registered through NETIM SARL and resolving to IP 172.67.192.151 (AS13335, Cloudflare, Inc., US), the site presents itself as 'Dexsport Casino,' as indicated by its page title. Infrastructure analysis reveals the use of Cloudflare nameservers (kianchau.ns.cloudflare.com, monika.ns.cloudflare.com) and a valid SSL certificate issued by Google Trust Services (WE1), which may aid in evading basic detection mechanisms. The domain is associated with a known 'Gambler Scam' phishing kit, suggesting it is designed to deceive users into engaging with fraudulent gambling or crypto-related activities under the guise of Binance services. The site employs WordPress, MySQL, PHP, and additional technologies such as Yoast SEO, Slick, jQuery Migrate, and jQuery, which are consistent with typical phishing kit deployments. It is currently active, returning an HTTP 200 status, and has been blocked by at least one security vendor (PhishDestroy). VirusTotal reports 10 of 95 security vendors flagging the domain, indicating a moderate level of detection but not universal consensus. The domain appears on one security blocklist, reinforcing its classification as a high-risk threat. Defenders should treat this domain as an active scam operation impersonating Binance. Recommended actions include blocking the domain and its resolving IP at the network level, monitoring for related infrastructure (e.g., Cloudflare-protected domains with similar naming patterns), and alerting users to the presence of fraudulent gambling or crypto schemes masquerading as legitimate platforms. The exact content and functionality of the site remain unanalyzed, but the combination of brand impersonation, phishing kit usage, and gambling-themed presentation warrants immediate mitigation.