mezowex[.]com
mezowex.com 피싱 및 보안 점검
“Mezowex: Most Popular Online Crypto Casino Based on Blockchain”
mezowex.com — 콘텐츠를 사용할 수 없음 (HTTP 502). 브랜드 사칭: Genericcrypto; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 12/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Ermes); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. 등록기관: Dominet (HK).
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Evidence Analysis
On July 23 2026, analysis of the domain mezowex.com indicates that it was used as part of a crypto‑casino phishing operation identified as the Gambler Scam kit. The site presented the page title “Mezowex: Most Popular Online Crypto Casino Based on Blockchain”, suggesting a fraudulent offer targeting cryptocurrency users. Registration information shows the domain was created on 19 October 2025 through Dominet (HK) Limited, and the authoritative name servers are cora.ns.cloudflare.com and mcgrory.ns.cloudflare.com, both belonging to Cloudflare. DNS resolution points to IP 188.114.96.3, which is hosted in the United States under ASN 13335 (Cloudflare, Inc.). No SSL certificate was observed, meaning the site served content over plain HTTP.
VirusTotal reports indicate that 12 of 95 scanned security vendors flagged the domain as malicious, providing independent confirmation of its malicious intent. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy sinkhole. Gridinsoft assigned a trust score of 1 out of 100, reflecting an extremely low reputation. The current operational status is offline, which may be the result of takedown actions or temporary hosting changes.
Uncertainty remains regarding the exact payload delivered to victims, as the page content has not been publicly archived, and no additional indicators such as malicious binaries or command‑and‑control endpoints have been disclosed. Defenders should continue to block the domain and its associated IP at perimeter defenses, monitor for any resurgence of the same name servers or hosting patterns, and add the domain to internal phishing and URL filtering lists. Because the infrastructure relies on Cloudflare’s shared network, future campaigns may reuse the same IP range, so correlation with other observed malicious domains that share the same DNS configuration is advised.
데이터 적용 범위13 recorded checks
보안 신호
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.