mexcxcx[.]xin

This domain, mexcxcx.xin, operates as a brand impersonation scam specifically targeting users of the MEXC cryptocurrency exchange platform. The site mimics the legitimate MEXC interface, presenting a fake login portal designed to harvest credentials or deploy crypto-draining malware. Analysis of the page title, which matches the legitimate brand name 'MEXC,' confirms the intent to deceive users into believing they are interacting with the official exchange. Such impersonation schemes are commonly used to facilitate unauthorized access to cryptocurrency wallets, leading to financial theft or account compromise. Evidence supporting the malicious nature of mexcxcx.xin includes detection by 11 out of 95 security vendors on VirusTotal, indicating a high likelihood of phishing or fraudulent activity. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. Infrastructure analysis reveals the domain resolves to the IP address 202.79.165.72, hosted under AS152194 (CTG Server Limited) in Japan. Additionally, the domain appears on three security blocklists and is actively blocked by multiple threat intelligence platforms, further validating its classification as a high-risk threat. Users who have visited mexcxcx.xin or interacted with its content should take immediate action to mitigate potential risks. First, revoke any active sessions or permissions granted to the site within connected cryptocurrency wallets or exchange accounts. Second, conduct a full scan of the device used to access the domain to detect and remove any malware or unauthorized scripts. Third, monitor all linked accounts for suspicious transactions or unauthorized access attempts and report any anomalies to the legitimate platform. If credentials were entered, reset passwords immediately and enable multi-factor authentication where available. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting cryptocurrency platforms.