# mexowex.com — SUSPICIOUS

> mexowex.com was a medium-risk phishing site masquerading as a blockchain casino. Avoid engagement; the domain is now offline.

## Summary
PhishDestroy identifies mexowex.com as a medium-risk generic phishing domain exploiting the allure of online blockchain casinos. The threat aimed to deceive users into divulging sensitive information through a fraudulent gambling platform.

The domain mexowex.com was registered on August 11, 2025, through Key-Systems GmbH and resolved to IP address 188.114.96.3. VirusTotal flagged the domain by 3 out of 95 security vendors, and it appeared on one security blocklist, indicating its suspicious nature. The Gridinsoft trust score rated it extremely low at 1 out of 100, further corroborating its malicious intent. The page title advertised a casino experience leveraging blockchain technology, a common lure in phishing schemes.

Currently, mexowex.com has been taken offline, mitigating the immediate risk to users. It is advised to avoid any interaction with this domain or similar sites that promise blockchain-based gambling rewards. Users and organizations should maintain updated security solutions and monitor for domains with similar characteristics to prevent credential theft and financial fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: MEXOWEX | Play at the best online casino based on Blockchain

## Domain Intelligence
- Registered: 2025-08-11 20:21:55
- Expires: 2026-08-11 20:21:55
- Registrar: Key-Systems GmbH
- Country: DE
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dom.ns.cloudflare.com dora.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a410b-3a2c-7460-888b-66fdb1b8ad1e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/53e3066e-819a-4797-b431-dacdd50b5644
- PhishDestroy: https://phishdestroy.io/domain/mexowex.com/
- LLM endpoint: https://phishdestroy.io/domain/mexowex.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mexowex.com/
Last updated: 2026-03-19