dexberg[.]net

The domain dexberg.net was registered on June 07, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently listed as taken offline. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, which belongs to the Cloudflare network (ASN 13335) and is geolocated in the United States. A TLS certificate identified as WE1 is presented, indicating that the site attempted to use HTTPS. The only publicly observed page title is “Exchange | Cryptocurrency trading and invest platform,” which aligns with the reported crypto‑scam profile and the declared target brand, Binance.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly suspicious reputation. The domain appears on one security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans recorded two positive detections out of ninety‑three security vendors, providing independent confirmation of malicious intent. Although the site is offline, the combination of brand impersonation, low trust score, blocklist inclusion, and vendor detections suggests an ongoing effort to lure victims into a Binance‑related cryptocurrency scheme.

Defenders should continue to enforce network‑level blocks for dexberg.net, monitor for any re‑hosting or CNAME redirection that might resurrect the domain, and update endpoint protection rules to include the observed SSL fingerprint. Ongoing surveillance of the associated IP range (188.114.96.0/24) is advised, as Cloudflare addresses are frequently reused by malicious actors. Evidence from the page title, registrar data, SSL details, IP attribution, and detection vendor flags should be incorporated into threat‑intel feeds to improve early warning capabilities for Binance‑related impersonation attempts.