mexvorin-es[.]com

The domain mexvorin-es.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'base'. It operated as a cryptocurrency scam, falsely presenting itself as an official trading platform to deceive users into disclosing sensitive information or transferring funds. As of the latest verification, mexvorin-es.com has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical analysis of mexvorin-es.com reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, while appearing on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolved to the IP address 104.21.18.223, hosted on Cloudflare's infrastructure (AS13335, US). The SSL certificate was issued by WE1, and the observed page title was 'Mexvorin - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas'. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with mexvorin-es.com should take immediate action to secure their assets and accounts. For cryptocurrency-related scams, revoke any token approvals granted to the site and transfer funds to a new, secure wallet. Monitor transaction histories for unauthorized activity. If login credentials were entered, change passwords immediately and enable two-factor authentication (2FA) on all associated accounts. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or local cybercrime units, to aid in mitigation efforts.