mexc-us-login[.]pages[.]dev

The domain mexc-us-login.pages.dev is flagged for high-risk brand impersonation, specifically targeting the cryptocurrency exchange MEXC. Analysis indicates that this domain is actively impersonating MEXC, potentially to deceive users into providing sensitive information such as login credentials or personal data.

Technical indicators reveal that the domain has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.167, which is located in California, USA. The domain was created on May 01, 2026, and is currently listed on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services / WE1, which can lend a false sense of security to unsuspecting users.

The domain is currently active, and no immediate response actions have been taken to mitigate the threat. Users are advised to avoid interacting with this domain and to report any suspicious activity to MEXC's official support channels. Despite the domain being on a blocklist, the remaining risk is high due to the potential for rapid spread and user deception. Immediate action is required to prevent further harm and ensure the integrity of MEXC's brand.