a57d3837-0955-44b1-8c50-79ad28871888[.]macguarie[.]com

This domain presents an elevated-risk brand impersonation threat specifically targeting CEX IO, a cryptocurrency exchange platform. It was designed to deceive users into believing they are accessing legitimate CEX IO services, potentially leading to credential theft or crypto drainer attacks. The page title, 'CEX io Prijava Berza | cex io login', suggests a login page aimed at harvesting sensitive information. Although the domain is currently offline, the risk remains significant due to its sophisticated impersonation of a well-known brand.

Technical indicators gathered by PhishDestroy reveal concerning details. The domain was registered on February 21, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com, and resolves to IP address 186.2.175.33. It appears on one security blocklist, and VirusTotal reports that 15 out of 95 security vendors flagged it as malicious. Notably, the domain lacks an SSL certificate, which is a red flag for any site requesting login credentials. These factors collectively underscore the domain's malicious intent and the need for caution.

Users are strongly advised to avoid visiting this domain or any similar suspicious URLs. For those who may have interacted with the site, immediate action is recommended: change passwords for CEX IO and any other accounts using the same credentials, enable two-factor authentication, and monitor accounts for unauthorized activity. Additionally, report the domain to relevant authorities and consider using a reputable security solution to scan for potential compromise. Vigilance against brand impersonation and phishing attempts is crucial in protecting personal and financial information.