mexswin6f[.]top
“Mexswin”
mexswin6f.top — Belum terverifikasi. Peniruan identitas merek: Facebook; Jenis penipuan: Social Media Phishing. Ringkasan bukti: VirusTotal 16/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); PhishDestroy score 95/100. Registrar: NameSilo.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain mexswin6f.top was registered on 29 December 2024 through NameSilo, LLC and continues to resolve to the IPv6 address 2a06:98c1:3121::3. The name servers cody.ns.cloudflare.com and katja.ns.cloudflare.com indicate that the site is fronted by Cloudflare, AS13335, located in the United States. The site presents a valid TLS certificate issued by Google Trust Services under the WE1 profile, and returns HTTP 200 responses. Detected technologies include Google Sign‑in, reCAPTCHA, jsDelivr, Google Tag Manager, Google Analytics, Cloudflare Browser Insights, and the Cloudflare edge platform, which are commonly employed to lend legitimacy to malicious pages.
Threat intelligence classifies mexswin6f.top as a high‑risk brand‑impersonation campaign targeting Facebook, with the page title “Mexswin” providing no direct indication of the malicious intent. VirusTotal analysis shows that nine out of ninety‑five security vendors have flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting a strong consensus of malicious behavior. The domain appears on one public blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its status as an active phishing vector.
Defenders should prioritize immediate containment of traffic to mexswin6f.top. Network controls can block the IPv6 address 2a06:98c1:3121::3 or the associated Cloudflare name servers, and endpoint protection should be configured to treat the domain as malicious based on its high‑risk rating and confirmed brand‑impersonation profile. Continuous monitoring of DNS queries for the domain and the surrounding infrastructure is advised, as the use of a reputable CDN may obscure future pivot points. Given the active status and the presence of multiple detection mechanisms, proactive blocking is the recommended mitigation.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Teknologi · 9 identified
Google's bot-challenge service. On phishing sites, used to appear legitimate and filter out automated scanners.
Free public CDN for open-source projects, serving files from npm and GitHub.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of mexswin6f.top · checked Mar 2, 2026
Analisis Konfigurasi Situs
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive