mexcc[.]name

PhishDestroy identifies mexcc.name as an active brand impersonation scam targeting MEXC exchange users. This domain leverages homograph deception—using a visually similar domain to trick visitors into entering login credentials or payment details on a counterfeit site. Attackers register lookalike domains to harvest credentials, initiate unauthorized trades, or deploy malware via fake 'deposit' or 'login' pages. The threat is immediate: once victims enter data, credentials are exfiltrated and used to drain accounts or sell on dark web markets. This domain was flagged by PhishDestroy’s automated pipeline under seed 25158e. Technical indicators include registration via Web Commerce Communications Limited dba WebNic.cc, domain creation on April 10, 2026, and resolution to IP 104.21.51.202. It uses a valid Let's Encrypt SSL certificate to appear legitimate. As of latest scan, VirusTotal shows 2/95 detections—indicating low detection by antivirus engines, likely due to recent creation and low usage. The page title matches “MEXC” exactly, enhancing deception. While not yet on major blocklists, the domain remains active and unblocked. Users who visited mexcc.name should immediately check their MEXC account for unauthorized transactions. Change passwords on MEXC and any reused accounts. Enable two-factor authentication (2FA) if not already active. Scan devices with reputable antivirus software. Report suspicious domains to MEXC’s official fraud reporting channel and avoid clicking links in unsolicited emails or messages. Disable browser notifications from this domain and clear cached credentials. Monitor financial accounts for signs of fraud. If credentials were entered, revoke all active sessions on MEXC and consider a full password reset across all platforms.