fozemex[.]com

The domain fozemex.com was registered on February 21, 2026 through Hello Internet Corp and is currently taken offline. The site presented the page title “Fozemex: Elon Musk’s Official Crypto Casino Powered by Blockchain” and explicitly impersonated the MEXC cryptocurrency exchange, fitting the classification of a crypto‑scam campaign. Infrastructure analysis shows the domain resolves to IP address 104.21.45.132, which is hosted in the United States under AS13335 Cloudflare, Inc. No SSL certificate was observed for the site, indicating unencrypted HTTP traffic.

Reputation services provide low trust scores: Scamadviser rates the domain at 26 / 100 and Gridinsoft at 1 / 100, reflecting a high likelihood of abuse. The domain appears on a single security blocklist and has been blocked by the PhishDestroy service. VirusTotal reports that 14 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment.

The campaign employed a publicly available “Gambler Scam” phishing kit, suggesting that the underlying code may be reused across other malicious sites. Defenders should add fozemex.com to blocklists at the network perimeter and endpoint level, monitor traffic to the associated Cloudflare IP for any residual activity, and watch for other domains that reference the same kit or use similar brand‑impersonation tactics against MEXC. Continuous telemetry from threat intelligence feeds should be consulted to detect any re‑registration attempts or related payload distribution.