flexget[.]top

The domain flexget.top is a phishing site engaged in brand impersonation targeting Binance, a major cryptocurrency exchange. It presents itself as a 'Cryptocurrency trading platform' to deceive users into entering credentials or transferring funds, classifying it as an investment scam. As of the latest verification, flexget.top has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical indicators confirm the malicious nature of flexget.top. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appears on 1 security blocklist (PhishDestroy). Registered through Web Commerce Communications Limited on September 03, 2025, it resolved to the IPv6 address 2606:4700:3031::ac43:d684, hosted by Cloudflare, Inc. in the US. No SSL certificate was observed, and the domain used Cloudflare nameservers (fay.ns.cloudflare.com and wells.ns.cloudflare.com). Gridinsoft assigned a trust score of 0/100, reinforcing its classification as a phishing threat.

Users who interacted with flexget.top should immediately change any compromised credentials, particularly for Binance or other financial accounts, and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious transactions and report any fraud to the impersonated brand’s support team. Additionally, victims can file complaints with platforms like the FBI’s IC3 (Internet Crime Complaint Center) or local cybercrime authorities to aid in tracking and mitigating such scams.