kfcpmexc[.]shop

This domain, kfcpmexc.shop, poses a significant threat by impersonating the MEXC brand. It is designed to deceive users into believing they are interacting with legitimate MEXC services, potentially leading to the theft of sensitive information such as login credentials, private keys, or personal data.

Analysis indicates that 18 out of 95 security vendors on VirusTotal flag this domain as malicious. The domain was registered through GNAME.COM PTE. LTD. on April 21, 2026, and resolves to the IP address 137.220.131.177, which is located in Japan under the management of Rackip Consultancy Pte. LTD. Additionally, the domain appears on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt, which may lend a false sense of security to unsuspecting users.

If users have visited this domain, they should immediately change their MEXC account passwords and any other credentials that may have been compromised. It is recommended to monitor financial accounts and enable two-factor authentication (2FA) for all relevant services. Users should also report the incident to MEXC support and consider running a full system scan to detect any potential malware infections.