cpanel[.]layerbtc-en[.]xyz

cpanel.layerbtc-en.xyz has been identified as an elevated risk due to its involvement in generic phishing schemes. The domain's infrastructure was likely used to deceive users and harvest sensitive information, leveraging social engineering tactics. The page title, 'Et øjeblik ...', suggests an attempt to appear as a legitimate waiting or loading page, which is a common technique in phishing campaigns to lull victims into providing credentials or personal data.

Technical analysis shows that this domain was detected by 6 out of 95 security vendors according to VirusTotal, indicating a notable level of consensus among threat intelligence sources. The domain was registered through OwnRegistrar, Inc. on September 05, 2025, which is indicative of recent or planned malicious activity. Additionally, cpanel.layerbtc-en.xyz appears on one major security blocklist and has been blocked by automated detection systems. The trust score assigned is 0/100, underscoring the domain's lack of credibility and high likelihood of malicious intent. The associated IP address is 2606:4700:3034::6815:35c1.

Given the domain’s confirmed phishing indicators and blocklisting, any user who visited cpanel.layerbtc-en.xyz should immediately review their accounts for unauthorized activity and update passwords, especially if any credentials were entered. Users are also advised to run a full security scan on their devices and remain vigilant for follow-up phishing attempts. Organizations should update their threat intelligence feeds to ensure this domain is blocked network-wide to prevent further exposure.