svzzq[.]naspers[.]top

This domain, www.svzzq.naspers.top, is identified as a credential phishing infrastructure targeting Apple users. Analysis confirms the site impersonates Apple’s authentication portals, specifically presenting a fraudulent CEX.io login interface titled 'CEX io Prijava Berza | cex io login.' The domain is currently offline, but prior activity indicates an elevated risk of credential theft and financial fraud for users who may have interacted with it. Infrastructure analysis reveals the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 186.2.175.33, hosted under AS59692 (IQWeb FZ-LLC) in Belize. The domain lacks an SSL certificate, increasing exposure to man-in-the-middle interception. Security vendors flagged the domain in 17 of 95 VirusTotal scans, and it appears on one blocklist, corroborating its malicious classification. The page title explicitly references CEX.io, a cryptocurrency exchange, suggesting a secondary targeting vector for users of financial platforms. Current status confirms the domain has been taken offline, likely due to detection and mitigation efforts. However, the infrastructure remains a residual risk if reactivated or repurposed. Organizations and individuals are advised to block the domain and its associated IP (186.2.175.33) at the network level. Users who may have entered credentials on this site should immediately reset passwords for Apple, CEX.io, and any other accounts where identical credentials were reused. Monitoring for unauthorized transactions or account access is strongly recommended. Security teams should treat this domain as part of a broader credential harvesting campaign, particularly those targeting financial and technology brands.