p3x7t[.]top

This domain, p3x7t.top, was identified as a phishing site designed to impersonate Apple with the intent of harvesting user credentials. Visitors to this site were likely presented with fraudulent login pages mimicking Apple’s official authentication portals, tricking them into entering sensitive account details such as Apple IDs, passwords, or payment information. The site’s deceptive design and branding could lead to unauthorized account access, financial fraud, or identity theft for unsuspecting users. Analysis indicates that p3x7t.top was registered on March 26, 2025, through Domain International Services Limited, a registrar frequently associated with malicious domains. The domain resolves to the IP address 180.178.44.101, hosted under AS45753 (Netsec Limited) in Hong Kong. Security vendors detected this domain as malicious, with 18 out of 95 engines on VirusTotal flagging it as a phishing threat. Additionally, the domain appears on at least one security blocklist, and its page title, "Shopee," further suggests an attempt to mislead users or obfuscate its true purpose. If you visited p3x7t.top or entered any credentials on the site, immediate action is required to mitigate potential risks. First, change the password for your Apple ID and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to add an extra layer of security. Monitor your financial statements and Apple account activity for any unauthorized transactions or changes. If suspicious activity is detected, report it to the relevant platform and consider contacting your financial institution to secure your accounts. Users should also scan their devices for malware, as phishing sites may distribute malicious payloads.