geromex[.]com

The domain geromex.com poses an elevated risk as a brand impersonation threat specifically targeting the MEXC cryptocurrency exchange. This phishing domain was designed to deceive users into believing they are interacting with legitimate MEXC services, likely through a fake login page or crypto drainer that harvests credentials and digital assets. Its registration through MAT BAO CORPORATION and offline status indicate it was taken down after being identified as malicious, but similar domains may still be active.

According to available intelligence, geromex.com appears on one security blocklist and was flagged by 11 out of 95 security vendors on VirusTotal, reflecting a high detection rate. The domain was registered through MAT BAO CORPORATION, a known registrar for phishing infrastructure. Its current status is offline, suggesting successful takedown efforts. The unique seed 8c725f confirms this specific case is part of a broader pattern of MEXC impersonation campaigns.

Users should remain vigilant against unsolicited communications directing them to unknown domains. To stay safe, always verify URLs by typing the official MEXC website directly into the browser rather than clicking links. Enable two-factor authentication on exchange accounts and use hardware wallets for long-term storage. If you encounter geromex.com or similar domains, report them to PhishDestroy and the relevant exchange's security team. Regularly monitor account activity for unauthorized access and consider using anti-phishing browser extensions.