mefowex[.]com

PhishDestroy first observed mefowex.com on Feb 26, 2026. The captured page title is “Suspected phishing site | Cloudflare”. Stored page analysis classifies the content as social media phishing. Campaign clustering links the hostname to the Gambler Scam kit. Current evidence score: 97/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Google Safe Browsing. VirusTotal recorded 14 detections among 93 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safebrowsing, Kaspersky, Lionic, Seclookup, Sophos, VIPRE on Jul 18, 2026 at 20:45 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 2, 2026 at 20:51 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100 (Scam); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:16 UTC.

An access-restricted HTTP 403 response was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list Atak Domain Bilgi Teknolojileri A.S. as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 104.21.75.56 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Apr 23, 2026 at 03:21 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through May 7, 2026; checked Mar 15, 2026 at 08:10 UTC.

The content indicators and 2 positive source findings support the current social media phishing classification.