mexcolo[.]cc

The domain mexcolo.cc is presently active and was registered on September 10, 2025 through Gname.com Pte. Ltd. It resolves to the Cloudflare‑hosted address 172.67.169.17 (AS13335, United States) and uses the authoritative nameservers anita.ns.cloudflare.com and guy.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate (WE1) and the site enforces HSTS, serving content over HTTP/3 with a Vue.js front‑end. An HTTP 521 response indicates that the origin server is unavailable, a condition commonly observed in malicious hosting configurations. The page title returned is “MEXC”, matching the targeted brand name, and the domain is explicitly flagged for brand impersonation of the cryptocurrency exchange “mexc”. Intelligence shows the domain appears on one security blocklist, carries a Gridinsoft trust score of 0 / 100, and has been flagged by three of ninety‑five VirusTotal scanners. It is also listed by PhishDestroy as a blocked entity. While the exact payload and user‑facing content have not been examined, the combination of brand‑matching title, low trust score, and multiple security detections strongly suggests a high‑risk impersonation campaign. Defenders should add mexcolo.cc to URL filtering and domain‑block lists, monitor DNS queries for the associated IP range, and enforce stricter inbound traffic controls. Continuous re‑evaluation is advised should additional threat intelligence emerge.