publicmexc[.]wixstudio[.]com

This domain, publicmexc.wixstudio.com, has been identified as a brand impersonation threat targeting the cryptocurrency exchange MEXC. The threat actor is likely attempting to deceive users into revealing sensitive information such as login credentials or private keys, which could lead to financial loss or unauthorized access to their accounts.

Infrastructure analysis reveals that the domain resolves to the IP address 34.144.206.118 and was created on June 11, 2026. The domain is registered through GoDaddy.com, LLC, and is currently protected by a Let's Encrypt SSL certificate. Technologies detected include Wix, React, Google Cloud, Lodash, HSTS, and Google Cloud CDN, suggesting a sophisticated setup. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. VirusTotal has flagged the domain as malicious with a score of 6/95, indicating a moderate level of detection among security vendors.

As of the latest assessment, the domain is offline, which suggests that it has been taken down by security measures or the registrar. Despite its current offline status, there remains a risk that the domain could be reactivated. It is recommended that users remain vigilant and avoid accessing the domain or any similar-looking URLs. Security teams should monitor for any signs of the domain coming back online and take appropriate actions to mitigate potential threats. The use of updated security software and awareness training can further reduce the risk of falling victim to such impersonation attacks.