mexc[.]party

The domain mexc.party is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange MEXC. It presents itself as the legitimate MEXC platform to deceive users into entering credentials or transferring funds, posing an elevated risk of financial loss. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, mexc.party has been taken offline.

Technical indicators confirm the malicious nature of mexc.party. The domain was flagged by 3 of 95 security vendors on VirusTotal, including CRDF, Fortinet, and Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through Gname.com Pte. Ltd. on August 31, 2025, the domain resolved to the IP address 45.192.98.52, hosted in Hong Kong under AS401701 (cognetcloud INC). No SSL certificate was present, and the observed page title matched the legitimate MEXC branding in Chinese. The domain used a single nameserver.

Users who interacted with mexc.party should immediately change their MEXC account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or logins. If cryptocurrency was transferred, report the incident to the relevant exchange and local cybercrime authorities. Victims may also report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.