mavomex[.]com

The domain mavomex.com is flagged as a brand impersonation threat targeting MEXC, a known cryptocurrency exchange platform. Analysis indicates the domain was designed to mimic MEXC while promoting a fraudulent crypto casino under the false pretense of affiliation with high-profile figures. The domain is currently offline, but prior activity suggests it operated as a deceptive platform to exploit users seeking legitimate trading or gambling services. Infrastructure analysis reveals the domain was registered on April 04, 2026, through Global Domain Group LLC, a registrar frequently associated with suspicious domains. It resolves to the IP address 188.114.96.3 and holds a Gridinsoft trust score of 1 out of 100, indicating a high-risk classification. The domain appears on one security blocklist and was flagged by 14 of 95 security vendors on VirusTotal. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious domains due to its accessibility. The page title, "Mavomex: Elon Musk’s Official Crypto Casino Powered by Blockchain," further underscores the deceptive nature of the operation, leveraging the reputation of public figures to lend credibility to the scam. Current status confirms the domain is offline, but the threat remains relevant due to the potential for resurgence or migration to a new domain. Organizations and users are advised to block the domain and its associated IP address (188.114.96.3) at the network level. Security teams should monitor for similar impersonation attempts, particularly those using crypto-related themes or high-profile figure endorsements. Users should verify the authenticity of any platform claiming affiliation with MEXC or other exchanges by cross-referencing official communication channels. If financial transactions were attempted via this domain, affected parties should report the incident to relevant authorities and monitor accounts for unauthorized activity.