cex-portal[.]com

The domain cex-portal.com has been identified as a brand impersonation threat targeting Apple, specifically masquerading as a legitimate CEX exchange login page. The site's title, 'CEX Login | Sign In to Your CEX Exchange Dashboard,' is designed to trick users into entering their credentials. This phishing campaign leverages the trusted Apple brand to harvest sensitive information from unsuspecting victims.

Technical analysis reveals that cex-portal.com was flagged by 9 out of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. The domain was registered on May 29, 2025, through NiceNIC International Group Co., Limited, and uses a Let's Encrypt SSL certificate (R12) to appear legitimate. It resolves to IP address 45.10.243.7 and appears on one security blocklist. Google Safe Browsing has not yet flagged the site, but its recent creation and suspicious behavior warrant caution.

As of the latest check, cex-portal.com has been taken offline, which is a positive development. However, users who may have visited the site before its takedown should be vigilant for potential credential theft or follow-up phishing attempts. It is recommended to change any passwords entered on the site and enable two-factor authentication on affected accounts. PhishDestroy advises avoiding interaction with such domains and reporting any suspicious login pages to relevant authorities.