melomex[.]com

PhishDestroy identifies active brand impersonation at melomex.com, a domain engineered to mimic the legitimate MEXC cryptocurrency exchange. This site poses as a MEXC portal to harvest credentials and drain digital wallets, exploiting user trust in the targeted brand. Technical analysis confirms the domain resolves to IP 188.114.97.3 and operates with a Let's Encrypt SSL certificate for deceptive legitimacy. Registered through MAT BAO CORPORATION on March 27, 2026, the domain remains undetected on VirusTotal (6/95 detections) as of the latest scan, highlighting its novel and evasive nature. This domain was flagged during routine threat monitoring and exhibits classic hallmarks of a crypto drainer campaign. It leverages MEXC’s recognizable branding to trick users into entering wallet credentials or downloading malicious payloads. The combination of a recent registration date (March 27, 2026), unflagged status on VirusTotal, and association with a known registrar suggests a newly deployed, automated threat designed for rapid exploitation. While blocklist counts remain low due to its recent emergence, the absence of detection does not equate to safety—users interacting with this domain risk credential theft and asset loss. If you accessed melomex.com or entered any information, immediately disconnect from the site and revoke any permissions granted. Scan your device for malware using reputable security software and change passwords used on the domain, especially if they match those used on legitimate MEXC platforms. Report the domain to PhishDestroy for takedown and monitor your cryptocurrency wallets for unauthorized transactions. Always verify URLs via official MEXC channels before engaging, and use PhishDestroy’s real-time verification tool to confirm domain legitimacy. Seed: 049b4a