nav-mexc-exch[.]pages[.]dev

The domain nav-mexc-exch.pages.dev has been identified as a brand impersonation threat specifically targeting MEXC. This domain is designed to mimic the legitimate MEXC Exchange platform, potentially luring users into providing sensitive information under the guise of creating, trading, or securing their accounts. The domain currently exhibits characteristics typical of phishing sites aimed at compromising user credentials.

Technical analysis reveals that the domain nav-mexc-exch.pages.dev resolves to IP address 172.66.45.6, registered through Cloudflare, Inc. Furthermore, VirusTotal currently reports a detection score of 0/95, indicating that it has not yet been flagged by most security engines despite its malicious intent. The domain was created on April 30, 2026, and is secured with an SSL certificate issued by Google Trust Services / WE1. Currently, the domain is blocked by PhishDestroy and appears on one security blocklist.

The domain remains active, posing a potential risk to users who may be deceived by its credible appearance. As a response, it is crucial for organizations and users to remain vigilant, ensuring they verify the authenticity of sites and communications before engaging. Continuous monitoring and reporting to security blocklists are recommended to mitigate the risk posed by this and similar threats.