cex-panel[.]com

This domain, cex-panel.com, poses a direct threat as a brand impersonation site designed to harvest user credentials. The page mimics an Apple-associated crypto dashboard login portal, tricking visitors into entering sensitive account details under the false pretense of accessing a legitimate service. Credential theft of this nature enables unauthorized access to financial platforms, personal data, and cryptocurrency wallets, leading to potential asset loss and identity compromise. Analysis indicates the domain was registered on May 29, 2025, through NiceNIC International Group Co., Limited, and resolves to the IP address 45.10.243.7, hosted under AS57724 (DDOS-GUARD LTD) in Russia. The site lacks an SSL certificate, increasing exposure to man-in-the-middle interception. At the time of assessment, 13 out of 95 security vendors on VirusTotal flagged cex-panel.com as malicious, and it appears on one security blocklist. The page title, 'CEX Login – Login to Your CEX Crypto Dashboard,' reinforces the deception by presenting a fabricated crypto service interface. Users who visited cex-panel.com should immediately revoke any entered credentials, particularly for crypto wallets or Apple-related accounts. Change passwords on all platforms where the same credentials may have been reused. Monitor account activity for unauthorized transactions and enable multi-factor authentication where available. If financial or crypto assets were accessed after visiting the site, report the incident to relevant financial institutions and local cybercrime authorities. The domain has since been taken offline, but similar threats may emerge using comparable infrastructure or naming patterns.