kkgwmexc[.]shop

PhishDestroy has identified kkgwmexc.shop as a high-risk brand impersonation threat specifically targeting MEXC, a cryptocurrency exchange. This domain was designed to deceive users into believing they were visiting an official MEXC site, potentially to steal login credentials or financial information. The threat level is elevated due to the sophisticated impersonation of a well-known financial brand.

Detailed analysis reveals that 13 out of 95 security vendors on VirusTotal flag this domain as malicious, indicating broad recognition of its danger. The domain resolves to IP address 137.220.131.177 and was created on April 8, 2026, through registrar GNAME.COM PTE. LTD. It uses a Let's Encrypt / R13 SSL certificate to appear legitimate and appears on three security blocklists. Although the domain is currently offline, its previous activity warrants caution.

To protect against MEXC impersonation threats, users should always verify the URL before entering credentials or executing transactions. Bookmark the official MEXC website and avoid clicking links from unsolicited emails or messages. Enable two-factor authentication and monitor accounts for unauthorized activity. If exposed, change passwords immediately and contact MEXC support. PhishDestroy recommends reporting any suspicious domains to security teams.