I created a HTML form on my computer and submitted it to mcxnow, and it created an account. I've never actually visited mcxnow. I suppose the same would work for login.

Oddly enough, on this page https://mcxnow.com/about.html they are talking about how their system is protected against CSRF.

Could it be they are talking out of their arses.