# Phishing sites impersonating CEX IO PhishDestroy has recorded 23 phishing domains impersonating CEX IO since 2026-02-18, 0 of them in the last 30 days. The most used registrars are NameSilo and GMO Internet; the most common TLDs are .com and .info. Open CEX IO only from its official app or a saved bookmark. 23Domains, all time 0Last 30 days 7Online at last check 2Confirmed takedowns ## New domains in the last 90 days CEX IO phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake CEX IO site Words most often added to the brand in reported domains: pinksale, finance, kivvibank, macguarie, blocks, games, cex, login, evsahibibasvuru, evsahibiturkiye. - Type the address yourself or use a bookmark; phishing links for CEX IO arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - CEX IO will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest CEX IO phishing domains The 23 most recently detected domains impersonating CEX IO Domain | First detected | Status at last check | Registrar | [cex-io-user-login.at](https://phishdestroy.io/domain/cex-io-user-login.at/) | 2026-02-27 | Offline | Iqweb | [cex-io-login.at](https://phishdestroy.io/domain/cex-io-login.at/) | 2026-02-27 | Offline | Iqweb | [api.kivvibank.com](https://phishdestroy.io/domain/api.kivvibank.com/) | 2026-02-19 | Offline | Onamae.com | [wwapi.pinksale-finance.info](https://phishdestroy.io/domain/wwapi.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [test.macguarie.com](https://phishdestroy.io/domain/test.macguarie.com/) | 2026-02-19 | Offline | GMO Internet | [hdgsqo.pinksale-finance.info](https://phishdestroy.io/domain/hdgsqo.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [241fb9da-d84c-4917-a29e-af735904a941.kivvibank.com](https://phishdestroy.io/domain/241fb9da-d84c-4917-a29e-af735904a941.kivvibank.com/) | 2026-02-19 | Offline | GMO Internet | [sitemap.kivvibank.com](https://phishdestroy.io/domain/sitemap.kivvibank.com/) | 2026-02-19 | Offline | GMO Internet | [dashboard.macguarie.com](https://phishdestroy.io/domain/dashboard.macguarie.com/) | 2026-02-19 | Offline | GMO Internet | [pymtdfqc.pinksale-finance.info](https://phishdestroy.io/domain/pymtdfqc.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [jrspvfge.pinksale-finance.info](https://phishdestroy.io/domain/jrspvfge.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [a57d3837-0955-44b1-8c50-79ad28871888.macguarie.com](https://phishdestroy.io/domain/a57d3837-0955-44b1-8c50-79ad28871888.macguarie.com/) | 2026-02-19 | Offline | Onamae.com | [wwlypjrtog.pinksale-finance.info](https://phishdestroy.io/domain/wwlypjrtog.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [ww38.pinksale-finance.info](https://phishdestroy.io/domain/ww38.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [ljwww.macguarie.com](https://phishdestroy.io/domain/ljwww.macguarie.com/) | 2026-02-19 | Taken down | Onamae.com | [bot-beta.pinksale-finance.info](https://phishdestroy.io/domain/bot-beta.pinksale-finance.info/) | 2026-02-19 | Online | NameSilo | [gateway.kivvibank.com](https://phishdestroy.io/domain/gateway.kivvibank.com/) | 2026-02-19 | Offline | GMO Internet | [assets.kivvibank.com](https://phishdestroy.io/domain/assets.kivvibank.com/) | 2026-02-19 | Taken down | Onamae.com | [cecpiww0u12d.blocks-games.top](https://phishdestroy.io/domain/cecpiww0u12d.blocks-games.top/) | 2026-02-19 | Offline | NameSilo | [cart-stage.blocks-games.top](https://phishdestroy.io/domain/cart-stage.blocks-games.top/) | 2026-02-19 | Offline | NameSilo | [agent.pinksale-scream.top](https://phishdestroy.io/domain/agent.pinksale-scream.top/) | 2026-02-19 | Offline | NameSilo | [evsahibiturkiye.social](https://phishdestroy.io/domain/evsahibiturkiye.social/) | 2026-02-18 | Unknown | NiceNIC | [evsahibibasvuru.com](https://phishdestroy.io/domain/evsahibibasvuru.com/) | 2026-02-18 | Unknown | NiceNIC | [All 23 CEX IO reports](https://phishdestroy.io/domain/?brand=CEX IO) ## Where they are registered and hosted ### Registrars - [NameSilo](https://phishdestroy.io/registrar/namesilo/)10 - [GMO Internet](https://phishdestroy.io/registrar/gmo-internet/)5 - Onamae.com4 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2 - [Iqweb](https://phishdestroy.io/registrar/iqweb/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)10 - [.info](https://phishdestroy.io/tld/info/)7 - [.top](https://phishdestroy.io/tld/top/)3 - [.at](https://phishdestroy.io/tld/at/)2 - .social1 ### Hosting networks - IQWeb FZ-LLC22 - Cloudflare, Inc.1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is CEX IO; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/cex-io/