mexcglobal[.]com[.]br

The domain mexcglobal.com.br has been identified as a phishing site engaged in brand impersonation, specifically targeting users of the aptos cryptocurrency platform. This domain was designed to mimic a legitimate cryptocurrency exchange, as indicated by its page title 'Mexc Global Exchange Corretora de Criptomoedas Site Oficial.' The site is currently offline, but it was previously flagged for attempting to deceive users into believing it was associated with aptos, raising concerns about its safety and legitimacy.

Technical analysis shows that mexcglobal.com.br was registered through HOSTINGER operations, UAB on November 14, 2024, and resolves to the IP address 84.32.84.16, located in Lithuania under AS47583 Hostinger International Limited. The domain has no SSL certificate issued and uses the nameservers ns1.dns-parking.com and ns2.dns-parking.com. VirusTotal reports 0 of 95 vendors detecting this domain as malicious, and Google Safe Browsing has not flagged it. However, it does appear on one security blocklist, specifically PhishDestroy, and holds a Gridinsoft trust score of 0/100.

Users who interacted with mexcglobal.com.br for cryptocurrency-related activities should take immediate steps to protect their assets. Since no drainer kit was identified, but credential compromise is possible, affected individuals should change their passwords, enable two-factor authentication, and monitor their accounts for unauthorized activity. Any evidence of phishing or scam activity involving mexcglobal.com.br should be reported to relevant security authorities and the impersonated brand, aptos.