mexc[.]us

The domain mexc.us is a cryptocurrency phishing site engaged in brand impersonation, specifically targeting users of the legitimate MEXC exchange. It presents itself as a decentralized exchange (DEX) platform under the title 'DEX+: Swap Crypto With Real-Time Prices and Charts | MEXC', aiming to deceive victims into disclosing login credentials or wallet details. No drainer kit was identified, and the site is currently taken offline, though its prior activity remains a risk for those who interacted with it.

Technical analysis of mexc.us reveals minimal detection at present, with 0 of 95 VirusTotal vendors flagging the domain and Google Safe Browsing not listing it. The domain appears on one security blocklist (PhishDestroy) and was registered through Gandi SAS on February 21, 2026. It resolves to the IP address 23.223.17.205, hosted by Akamai International B.V. in Canada, and uses an SSL certificate issued by DigiCert Inc under the GeoTrust TLS RSA CA G1 chain. Detected technologies include Nginx, OpenResty, and HSTS enforcement. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as a scam.

Users who visited mexc.us should immediately change any passwords or credentials entered on the site and enable two-factor authentication (2FA) on their legitimate MEXC accounts. For cryptocurrency wallets, revoke any token approvals or connected dApps associated with the domain. Monitor accounts for unauthorized transactions and report the phishing attempt to MEXC’s official support channels. Additionally, victims can submit the domain to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader threat mitigation.