mezwex[.]com

This domain, mezwex.com, was registered on 21 February 2026 through MAT BAO CORPORATION and immediately pointed to Cloudflare infrastructure (AS13335) with the IP address 172.67.193.154. The site title observed in the limited snapshot reads “Mezwex: Elon Musk’s Official Crypto Casino Powered by Blockchain”, indicating an attempt to convey a fabricated partnership with Elon Musk for a crypto‑casino offering. The SSL certificate was issued by Google Trust Services under the WE1 identifier, which is typical for Cloudflare‑protected sites and does not imply legitimacy. Network analysis shows the domain resolves to a Cloudflare‑managed IP located in the United States and uses the name servers dana.ns.cloudflare.com and kyle.ns.cloudflare.com, a common pattern for rapidly spun‑up malicious sites. The page returned HTTP 403, suggesting the content is no longer publicly reachable; the current status is listed as offline.

Nevertheless, the domain has been actively flagged: PhishDestroy has added it to its blocklist, and it appears on one additional security blocklist. VirusTotal scans recorded 12 detections out of 95 scanners, and the Gridinsoft trust score is 1 / 100, both indicating a high likelihood of malicious intent. The kit identified as “Gambler Scam” aligns with the crypto‑casino narrative and is frequently reused in credential‑harvesting and cryptocurrency fraud campaigns. What remains uncertain is the exact content of the phishing page, the specific data collection mechanisms employed, and whether any victim data has been exfiltrated before the takedown.

No public safe‑browsing or OTX entries were observed in the available intelligence, so broader feed coverage is limited. Defenders should immediately block mezwex.com at the DNS and proxy layers, add the associated IP 172.67.193.154 to network‑level deny lists, and ensure URL filtering solutions flag the domain.