sulmex[.]com

sulmex.com entered the PhishDestroy evidence set on Sep 12, 2025. Stored content metadata identifies MEXC as the apparent target. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).

Three independent sources are positive: VirusTotal, URLQuery, and URLScan. VirusTotal recorded 1 detections among 95 engines: Gridinsoft on Jun 13, 2026 at 16:50 UTC. URLQuery recorded 100 detections. URLScan returned a malicious verdict with score 100 on Mar 5, 2026 at 01:33 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 23:22 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:25 UTC; content was unavailable. Registration records for the domain list Web Commerce Communications Limited as the registrar and Aug 27, 2025 as the creation date. Registration preceded first observation by 15 days. At collection time, the hostname resolved to 104.21.51.245 on AS13335 (CLOUDFLARENET, US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “Sulmex: Most Popular Online Crypto Casino Based on Blockchain”. DOM analysis completed on Apr 23, 2026 at 19:24 UTC; stored DOM score 0/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 3, 2026 at 04:00 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as MEXC-themed crypto scam.