Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@matbao.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mezwex[.]com
Verifica phishing e sicurezza per mezwex.com
“Mezwex: Elon Musk’s Official Crypto Casino Powered by Blockchain”
mezwex.com — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: Genericcrypto; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 12/95 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 91/100. Registrar: MAT BAO.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain, mezwex.com, was registered on 21 February 2026 through MAT BAO CORPORATION and immediately pointed to Cloudflare infrastructure (AS13335) with the IP address 172.67.193.154. The site title observed in the limited snapshot reads “Mezwex: Elon Musk’s Official Crypto Casino Powered by Blockchain”, indicating an attempt to convey a fabricated partnership with Elon Musk for a crypto‑casino offering. The SSL certificate was issued by Google Trust Services under the WE1 identifier, which is typical for Cloudflare‑protected sites and does not imply legitimacy. Network analysis shows the domain resolves to a Cloudflare‑managed IP located in the United States and uses the name servers dana.ns.cloudflare.com and kyle.ns.cloudflare.com, a common pattern for rapidly spun‑up malicious sites. The page returned HTTP 403, suggesting the content is no longer publicly reachable; the current status is listed as offline.
Nevertheless, the domain has been actively flagged: PhishDestroy has added it to its blocklist, and it appears on one additional security blocklist. VirusTotal scans recorded 12 detections out of 95 scanners, and the Gridinsoft trust score is 1 / 100, both indicating a high likelihood of malicious intent. The kit identified as “Gambler Scam” aligns with the crypto‑casino narrative and is frequently reused in credential‑harvesting and cryptocurrency fraud campaigns. What remains uncertain is the exact content of the phishing page, the specific data collection mechanisms employed, and whether any victim data has been exfiltrated before the takedown.
No public safe‑browsing or OTX entries were observed in the available intelligence, so broader feed coverage is limited. Defenders should immediately block mezwex.com at the DNS and proxy layers, add the associated IP 172.67.193.154 to network‑level deny lists, and ensure URL filtering solutions flag the domain.
Indicatori di sicurezza
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 1 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
PD-1769248096-mezwex.com Recipient: abuse@matbao.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo