mezo[.]claims

The domain mezo.claims was registered on February 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently listed as offline. Analysis shows the site hosted a page titled "Mezo Token Claim | Mezo Token Launch | Mezo TGE," indicating a crypto token claim narrative. The domain is classified as a crypto scam that impersonates the brand "across," consistent with the supplied brand target information. Infrastructure traces point to the IP address 172.67.143.105, which resolves to a Cloudflare network (AS13335) located in the United States.

The SSL certificate associated with the domain is identified as "WE1," confirming that TLS was in use while the site was active. Reputation services provide a Gridinsoft trust score of 0 out of 100, and the domain appears on two security blocklists. It has been blocked by PhishDestroy and ScamSniffer, and VirusTotal reports that six of ninety‑three security vendors flagged the domain. These data points collectively indicate a malicious infrastructure designed to lure victims into a token claim process.

Uncertainty remains about the exact payload delivered to visitors, as no sandbox or content analysis is provided. Defenders should continue to block the domain at perimeter defenses, monitor for any resurgence of the host IP, and update threat intelligence feeds with the identifier 87f2da. Further investigation of the SSL certificate chain and any associated URLs could reveal additional campaign artifacts.