ebowmexc[.]icu

This domain, ebowmexc.icu, poses a high-risk brand impersonation threat specifically targeting users of the MEXC cryptocurrency exchange. Analysis indicates the site is designed to replicate the legitimate MEXC platform, likely to deceive visitors into entering sensitive credentials or approving malicious transactions. Such impersonation attacks often lead to unauthorized access to crypto wallets, resulting in asset theft through mechanisms like crypto drainers or direct fund transfers to attacker-controlled addresses. Infrastructure analysis reveals multiple technical indicators confirming the malicious nature of this domain. The domain was registered on April 21, 2026, through Gname.com Pte. Ltd., an unusually short lifespan that aligns with typical phishing infrastructure timelines. At the time of assessment, 14 out of 95 security vendors on VirusTotal flagged ebowmexc.icu as malicious, and it appears on three independent security blocklists, including MetaMask and PhishDestroy. The site resolves to the IP address 137.220.131.177 and displays a page title identical to the legitimate MEXC platform, further reinforcing its deceptive intent. The Gridinsoft trust score of 0/100 provides additional confirmation of its fraudulent status. Users who visited ebowmexc.icu should take immediate action to mitigate potential risks. First, disconnect any active wallet connections associated with the site and revoke any suspicious transaction approvals using a blockchain explorer or wallet management tool. Next, scan the device used to access the domain for malware, as some crypto-focused threats deploy additional payloads. Change passwords for any accounts accessed on the same device, particularly those related to cryptocurrency or financial services. Monitor wallet activity closely for unauthorized transactions and consider transferring assets to a new wallet if any compromise is suspected. Finally, report the domain to relevant security teams and blocklists to prevent further victimization.