bavomex[.]com

This domain, bavomex.com, is flagged for brand impersonation targeting MEXC, a legitimate cryptocurrency exchange platform. Analysis indicates the site presents itself as a decentralized Web3 gambling service under the title 'Bavomex | Decentralized Web3 Gambling Site with Provable Trust,' a tactic likely designed to lure users into disclosing login credentials or connecting cryptocurrency wallets. The infrastructure exhibits characteristics consistent with phishing operations, including the use of a gambling-themed facade to obfuscate its true intent of credential harvesting or wallet compromise. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 20, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.206.183, a Cloudflare-hosted endpoint that may provide anonymity and resilience against takedowns. The domain is flagged by 2 out of 95 security vendors on VirusTotal, appears on one security blocklist, and has a Gridinsoft trust score of 1/100. The SSL certificate is issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the site. No Google Safe Browsing (GSB) detections were reported at the time of analysis. The domain remains active and poses an elevated risk to users, particularly those familiar with MEXC or cryptocurrency services. Response actions should include immediate reporting to hosting providers, registrar abuse contacts, and relevant threat intelligence platforms to facilitate takedown efforts. Users are advised to verify domain authenticity through official channels, avoid interacting with unsolicited links, and employ hardware-based multi-factor authentication for cryptocurrency wallets. Despite partial vendor detection, the domain's low visibility on security platforms underscores the need for heightened vigilance, as it may evade automated protections in enterprise or consumer security tools.