mexswing[.]top
mexswing.top 피싱 및 보안 점검
“Mexswin”
mexswing.top — 마지막으로 알려진 활성 (HTTP 200). 브랜드 사칭: Facebook; 사기 유형: Social Media Phishing. 증거 요약: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 93/100. 등록기관: NameSilo.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain mexswing.top was registered through NameSilo, LLC on 29 December 2024. It resolves to the IP address 104.21.48.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Authoritative nameservers are cody.ns.cloudflare.com and katja.ns.cloudflare.com, indicating the use of Cloudflare's DNS and CDN services. The site presents an HTTP 200 response and serves an SSL certificate issued by Google Trust Services under the WE1 profile.
VirusTotal analysis shows that 1 out of 95 security vendors flagged the domain, suggesting limited but present malicious activity. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the classification of the site as high‑risk. The risk level is explicitly marked as high and the operational status is active.
Technical profiling reveals the presence of Google Sign‑in, reCAPTCHA, jsDelivr, Google Tag Manager, Google Analytics, and Cloudflare Browser Insights, all of which are commonly leveraged to lend legitimacy to fraudulent pages. The page title reported is 'Mexswin', and the campaign is identified as a brand impersonation targeting Facebook. The scam type is listed as social_media, indicating an attempt to harvest credentials or engage users under the guise of a Facebook‑related service.
Defenders should prioritize blocking mexswing.top at network perimeters and email gateways, and add the domain to internal threat intelligence feeds. Continuous monitoring of DNS queries for the associated Cloudflare IPs and the specific nameservers can help detect lateral movement. Given the low detection count, threat hunting should include heuristic searches for the observed technology stack combined with the 'Mexswin' page title to uncover related artifacts.
네트워크 보안 인텔리전스 Registrar context
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 9 identified
Google's bot-challenge service. On phishing sites, used to appear legitimate and filter out automated scanners.
Free public CDN for open-source projects, serving files from npm and GitHub.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
보관된 증거
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of mexswing.top · checked Mar 2, 2026
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.