central-mev[.]com

The domain central-mev.com was a phishing site engaged in brand impersonation targeting Ethereum users. It presented itself as a cryptocurrency exchange under the guise of 'MEV', using branding and page elements designed to mimic legitimate Ethereum-related services. This site posed an elevated risk as a cryptocurrency scam, aiming to deceive victims into disclosing sensitive information or transferring funds. As of the latest verification, central-mev.com has been taken offline.

Technical indicators for central-mev.com include detection by 2 of 95 security vendors on VirusTotal, including Ermes and Gridinsoft, which assigned a trust score of 0/100. The domain was registered on July 1, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to the IP address 104.21.56.95, hosted on Cloudflare's infrastructure in the US. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by WE1. The observed page title was 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | MEV'. Google Safe Browsing did not flag the domain at the time of analysis.

Individuals who interacted with central-mev.com should immediately revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Move remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed while the site was active, enable two-factor authentication, and remain vigilant for signs of fraud. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to assist in broader mitigation efforts.