mixer[.]12355[.]cc

This domain, mixer.12355.cc, is flagged as a credential theft phishing operation targeting users of the Sun-Panel platform. Analysis of the page title, which explicitly displays 'Sun-Panel,' indicates an attempt to deceive victims into believing they are interacting with a legitimate service. No evidence of crypto drainer functionality or brand impersonation beyond the Sun-Panel association was observed, but the domain's infrastructure and lack of security controls suggest a focus on harvesting login credentials or other sensitive user data. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 103.146.159.228 and was registered through 22net, Inc. on February 21, 2026. It lacks an SSL certificate, increasing the likelihood of interception or tampering during data transmission. The domain appears on one security blocklist and is flagged by 3 out of 95 security vendors on VirusTotal. No Google Safe Browsing (GSB) detections were recorded at the time of analysis, though this may reflect a lag in reporting rather than a clean status. As of the latest assessment, mixer.12355.cc has been taken offline, likely in response to detection or enforcement actions. However, the elevated risk remains due to the domain's recent creation date and the potential for threat actors to redeploy the infrastructure under a new name. Users who may have interacted with this domain are advised to reset credentials for any accounts accessed during the exposure window, particularly those associated with Sun-Panel. Organizations should monitor network logs for connections to 103.146.159.228 and consider blocking the IP at the perimeter to prevent potential lateral movement or data exfiltration attempts.