gateway[.]kivvibank[.]com

The domain gateway.kivvibank.com is flagged with an elevated risk level due to its specific threat type of brand impersonation. It appears to be targeting the cryptocurrency exchange platform CEX IO, which can lead to significant financial and personal data losses for unsuspecting users.

Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate consensus among security professionals regarding its malicious nature. It is registered through GMO Internet, Inc., and resolves to an IP address located in Belize (186.2.175.33, AS59692 IQWeb FZ-LLC). The domain was created on February 21, 2026, and currently appears on one security blocklist. Notably, the domain lacks an SSL certificate, which is a common indicator of a non-secure and potentially malicious website. The page title, 'CEX io Prijava Berza | cex io login,' further reinforces the brand impersonation threat, as it mimics the login page of CEX IO.

To mitigate the risks associated with this brand impersonation threat, organizations and individuals should ensure that their security awareness training includes recognizing phishing tactics, particularly those involving fake login pages. Network administrators should consider blocking access to this domain and similar suspicious URLs. Additionally, using multi-factor authentication (MFA) for sensitive accounts and regularly updating security protocols can help prevent unauthorized access and data breaches.