3ex-login[.]com

3ex-login.com is a phishing domain involved in brand impersonation, specifically targeting Apple users to steal credentials. The site operated as a credential phishing scam under the guise of a login platform, but it has since been taken offline. This domain is not safe and should be treated as a scam designed to deceive users into divulging sensitive information.

Technical analysis shows that 3ex-login.com was registered on November 6, 2024, through the registrar NiceNIC International Group Co., Limited. It resolves to the IP address 185.149.120.107, located in Russia under AS57724 DDOS-GUARD LTD. The domain lacks an SSL certificate and presents a page titled '3EX Login & 3EX Exchange | 3EX Login Trading Platform.' It appears on one security blocklist (PhishDestroy) and is flagged by 1 of 95 VirusTotal vendors, including SOCRadar. Additionally, it is found in one AlienVault OTX threat intelligence pulse and has a ScamAdviser trust score of 1 out of 100. The domain's nameservers include expired entries from NICEISP and CloudNS.

Users who suspect they have interacted with 3ex-login.com should immediately change their Apple account passwords and enable two-factor authentication to mitigate credential theft risks. It is important to monitor accounts for any unauthorized activity or fraud. Reports of phishing attempts involving this domain can be submitted to appropriate security organizations and the impersonated brand's abuse channels to help prevent further victimization.