japamexc[.]one

PhishDestroy has identified japamexc.one as an active phishing domain designed to impersonate the legitimate MEXC cryptocurrency exchange. This site mimics the real platform to trick users into entering login credentials or payment details, which are then harvested by attackers for fraud or resale on dark web markets. The domain’s primary threat is credential theft via brand impersonation, targeting users who may mistake it for the official MEXC website. This domain was flagged by 6 out of 95 VirusTotal security vendors and is blocked by InversionDNS. It was registered on March 13, 2026, through Gname.com Pte. Ltd., and resolves to the IP address 137.220.131.177. Its SSL certificate is issued by Let’s Encrypt, a common tactic to appear legitimate. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, indicating deceptive practices aimed at manipulating users. If you visited japamexc.one, avoid entering any personal information, including usernames, passwords, or payment details. Disconnect from the site immediately and scan your device for malware using reputable antivirus software. If you reused passwords from this site elsewhere, change them on all accounts and enable two-factor authentication where possible. Report the domain to your organization’s security team or through platforms like PhishDestroy to help block it for others. Never rely solely on SSL certificates or domain age as indicators of safety—always verify URLs through official channels before interacting with financial platforms.