whitebit-panel[.]at

Analysis indicates that the domain whitebit-panel.at is an active phishing site targeting users of a cryptocurrency exchange. The page title, 'WhiteBIT Вхід — Авторизація акаунту | Login,' explicitly references the WhiteBIT brand and presents a login interface in Ukrainian and English, suggesting an attempt to harvest credentials. Infrastructure analysis reveals the domain is hosted on IP address 95.129.234.137 and protected by DDoS-Guard, a service frequently associated with malicious or high-risk domains. The site appears on four security blocklists and is flagged in 23 threat intelligence pulses, reinforcing its classification as a confirmed phishing resource. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, and does not mitigate the threat. Technologies detected on the domain include Vue.js, jQuery, and Hammer.js, which are standard frameworks and do not inherently indicate malicious intent. However, the presence of these libraries does not reduce the risk posed by the site's fraudulent purpose. Defenders should treat this domain as high-risk and take immediate action to block access. The site remains active as of July 12, 2026, and has not been mitigated despite its inclusion in multiple threat intelligence feeds. No evidence suggests the site has been taken down or its infrastructure disrupted. Organizations and users should ensure that this domain is added to network-level blocklists and that any credentials potentially exposed through this phishing attempt are invalidated.