penomex[.]com

The domain penomex.com is currently active and engaged in brand impersonation, specifically targeting the cryptocurrency exchange MEXC. Analysis indicates this is not a legitimate platform but a fraudulent operation designed to deceive users by leveraging the reputation of a well-known brand. The page title explicitly claims affiliation with Elon Musk and blockchain technology, a common tactic to lend false credibility to scams in the cryptocurrency space. Infrastructure analysis reveals several critical technical indicators. The domain is flagged by 1 of 95 security vendors on VirusTotal, suggesting limited but present detection. It was registered on April 28, 2026, through Fewmoretaps OU, operating under the name Trustname.com, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 104.21.37.11 and is protected by Cloudflare, which may obscure further investigation into its hosting infrastructure. Additional technologies detected include Twitter Ads and Facebook Pixel, indicating potential paid promotion on social media platforms. The domain appears on one security blocklist and is blocked by PhishDestroy, while Gridinsoft assigns it a trust score of 0 out of 100, reinforcing its fraudulent nature. The SSL certificate is issued by Let’s Encrypt, a legitimate but commonly exploited certificate authority in phishing operations. Current evidence confirms penomex.com remains an active threat. Users are strongly advised to avoid interacting with the domain or any associated links. Organizations should update blocklists to include this domain and its resolving IP address. Given the use of social media tracking technologies, monitoring for related advertisements or promoted posts is recommended. The domain’s creation date in 2026 is anomalous and may indicate a typo-squatting attempt or an error in registration records, further justifying heightened scrutiny. Immediate reporting to relevant security teams and platforms hosting the domain’s content is advised to mitigate potential harm to end users.