apps-dexsport[.]xyz

PhishDestroy identifies the active domain apps-dexsport.xyz as a sports-betting phishing portal impersonating a legitimate betting interface to harvest user credentials and payment details. The page is hosted on 104.64.21.38.158, served over a Let’s Encrypt SSL certificate, and registered through Dynadot LLC on April 25 2026, giving it the appearance of legitimacy while actually operating a credential-harvesting operation. This domain has not yet been flagged by any of the 95 engines on VirusTotal (3/95 detections), and there is no public blocklist coverage at this time, indicating a low but growing risk profile. Technical indicators include a recently minted domain age of 2 days and a single resolving IP address shared with multiple other uncategorized gambling-themed sites, suggesting a fast-flux or low-cost hosting strategy intended to evade early detection. Users who visited apps-dexsport.xyz should immediately cease use of any credentials entered there, revoke any reused passwords across other accounts, and scan devices for follow-on malware. Report the domain to your security team and consider blocking 104.21.38.158 at the network perimeter. Monitor financial accounts linked to any data entered on the site for unauthorized transactions.