imexco-int[.]com

Imexco-int.com was registered on 21 February 2026 through GoDaddy.com, LLC. The domain resolves to the IPv4 address 209.42.17.30, which is announced by AS51713 (WHG Hosting Services Ltd) and geolocated to Great Britain. The authoritative name servers are ns1.uk12.tmd.cloud and ns2.uk12.tmd.cloud, and the zone contains an MX record pointing to the domain itself with priority 0. The site presents an HTTPS service using a Let’s Encrypt R12 certificate, and HTTP responses return status code 200. Detected web technologies include LiteSpeed and HTTP/3, indicating a modern web server stack. The page title returned by the server is “LINGKARTOTO | Login Alternatif Situs Toto Slot Thailand Resmi Anti Blokir”.

No visual analysis of the content is available, but the title suggests a focus on a gambling‑related login portal rather than the advertised MEXC brand. The intelligence flags the domain as a crypto scam that impersonates the cryptocurrency exchange MEXC. VirusTotal scans show that 12 of 93 security vendors have flagged the domain as malicious. Independent reputation services assign a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist, where it is listed by PhishDestroy. The current operational status is active, and the risk rating is high.

While the existing data confirms the presence of malicious infrastructure and a brand‑impersonation intent, the exact phishing payload, credential‑capture mechanisms, and any downstream command‑and‑control infrastructure remain unverified. Defenders should update URL filtering to block both the domain and its resolved IP address, enforce TLS inspection to capture any credential traffic, and monitor DNS queries for the associated name servers. Adding the domain to internal blocklists, sharing the indicator set with threat‑sharing platforms, and conducting periodic re‑scans on VirusTotal are recommended to track any changes in vendor detection.