ljwww[.]macguarie[.]com

The domain ljwww.macguarie.com is assessed at an elevated risk level due to its specific threat type of brand impersonation. This domain is designed to deceive users by mimicking the legitimate CEX IO login page, potentially leading to credential theft and financial loss.

Analysis indicates that ljwww.macguarie.com has been taken offline, but it previously resolved to the IP address 186.2.175.33, which is located in BZ (AS59692 IQWeb FZ-LLC). The domain was created on February 21, 2026, and is registered through GMO Internet Group, Inc. d/b/a Onamae.com. Notably, 17 out of 95 security vendors on VirusTotal flagged this domain as malicious, and it appears on one security blocklist, specifically PhishDestroy. The domain lacked an SSL certificate, which is a common indicator of a phishing site, and the page title 'CEX io Prijava Berza | cex io login' further suggests an attempt to mimic the legitimate CEX IO login page.

To mitigate the risks associated with brand impersonation, users and organizations should remain vigilant and verify the URL of any login pages before entering credentials. Security teams are advised to monitor for any attempts to register similar domain names and to implement DNS-based blocking solutions to prevent access to known malicious domains. Additionally, employee training on phishing tactics and regular security awareness updates can significantly reduce the likelihood of successful impersonation attacks.