# nuremex.com — SUSPICIOUS

> Warning: nuremex.com impersonated MEXC crypto brand. The site is now offline but appeared on security blocklists. Avoid interaction with this domain.

## Summary
PhishDestroy identifies nuremex.com as a low-risk brand impersonation domain targeting the MEXC crypto platform. It falsely presented itself as "Elon Musk’s Official Crypto Casino Powered by Blockchain," misleading users with brand association.

The domain was registered on March 2, 2026, through Hello Internet Corp and resolved to IP 172.67.164.239. VirusTotal flagged it by 2 out of 95 security vendors, and it appeared on one security blocklist, indicating limited but notable suspicion.

Currently, nuremex.com is offline, mitigating further risk. Users are advised to remain cautious of similar domains and avoid engagement with suspicious crypto-related sites claiming celebrity endorsements.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: MEXC
- Page title: Nuremex: Elon Musk’s Official Crypto Casino Powered by Blockchain

## Domain Intelligence
- Registered: 2026-03-02 17:00:01
- Registrar: Hello Internet Corp
- Country: US
- IP: 172.67.164.239
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: kanye.ns.cloudflare.com nelly.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/Kjjyh75G/3bf82f504cfa.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b7818c11-a3cb-4ae1-aa68-a577269569df
- PhishDestroy: https://phishdestroy.io/domain/nuremex.com/
- LLM endpoint: https://phishdestroy.io/domain/nuremex.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nuremex.com/
Last updated: 2026-03-19