charigelly[.]com

The domain charigelly.com was identified as a high-risk brand impersonation threat, specifically targeting Apple users with a cryptocurrency drainer. The page title, "Cryptocurrency Exchange - Crypto & Altcoin Swap Platform with Lowest Fees," suggests the site masqueraded as a legitimate crypto platform to lure victims into connecting their wallets, thereby draining funds. Despite the Apple brand impersonation, the content indicates a broad crypto scam rather than a direct Apple login page.

Technical indicators paint a concerning picture. VirusTotal flagged the domain with 15 out of 95 security vendors marking it as malicious. It was registered on June 6, 2025, through Paknic Private Limited and resolves to IP address 62.60.226.213. The SSL certificate was issued by Let's Encrypt (R13). The domain appears on five security blocklists and was found in 16 threat intelligence pulses on AlienVault OTX, indicating active monitoring by the security community. Google Safe Browsing status was not explicitly provided but given the blocklist presence, it likely flagged the site.

Currently, the domain is offline, suggesting it was taken down by the registrar or hosting provider. However, the risk remains as similar domains may reappear. Users who may have interacted with the site should immediately revoke any permissions granted to the site and monitor their crypto wallets for unauthorized transactions. PhishDestroy recommends verifying any communications purporting to be from Apple or crypto exchanges through official channels and never connecting a wallet to untrusted sites. Continued vigilance is advised, as criminal groups often rotate domains and infrastructure to evade takedowns.