zekomex[.]com

The domain zekomex.com was registered on February 21, 2026 through MAT BAO CORPORATION and resolves to the Cloudflare‑owned address 104.21.57.173, which is located in the United States and advertised under ASN 13335 (Cloudflare, Inc.). The site presents the page title "Zekomex: Most Popular Online Crypto Casino Based on Blockchain" and does not serve an SSL certificate, indicating unencrypted HTTP access. Analysis identifies the domain as a brand‑impersonation scheme targeting the cryptocurrency exchange MEXC, classified as a Crypto Scam.

Infrastructure data shows the domain is hosted on Cloudflare’s network using the nameservers damien.ns.cloudflare.com and wally.ns.cloudflare.com. Threat intelligence indicates that the site was flagged by 16 of 93 VirusTotal security vendors, and it appears on a single security blocklist, specifically PhishDestroy, which has actively blocked the domain. The malicious payload is associated with the Gambler Scam phishing kit, and the Gridinsoft trust score is recorded at 1 out of 100, reflecting an extremely low confidence rating.

As of the report date, July 23, 2026, the domain is listed as taken offline, but historical activity may still be relevant for incident response. Defenders should continue to block the IP address 104.21.57.173 and the associated Cloudflare name servers, monitor for any resurgence of the domain or similar registrations, and incorporate the observed indicators—creation date, registrar, page title, lack of TLS, detection count, and blocklist entry—into threat‑intel feeds and URL filtering rules. Because the site currently returns no SSL certificate and is offline, direct probing is unlikely to yield additional data, but continued vigilance is advised to prevent reuse of the underlying infrastructure for future impersonation campaigns.