mexc[.]monster

The domain mexc.monster is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange MEXC. It presents itself as the legitimate MEXC platform to deceive users into entering credentials or transferring funds, posing an elevated risk of financial loss through cryptocurrency scams. As of the latest verification, mexc.monster has been taken offline, though users who interacted with it while active remain at risk.

Technical analysis shows mexc.monster was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned a trust score of 0 out of 100. The domain appears on one security blocklist, PhishDestroy, and was registered on August 31, 2025, through Gname.com Pte. Ltd. It resolved to the IP address 45.192.98.52, hosted in Hong Kong under AS401701 (cognetcloud INC), with no SSL certificate issued. The observed page title matched the legitimate MEXC branding in Chinese, reinforcing the impersonation attempt.

Users who accessed mexc.monster should immediately change any passwords or credentials entered on the site and enable two-factor authentication on their legitimate MEXC accounts. For cryptocurrency-related exposure, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the phishing domain to the impersonated brand (MEXC) via their official support channels, and submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities for further action.