Confirmed abuse on *****[.]mx
Phishing and government impersonation detected on *****[.]mx
A phishing page on *****[.]mx was identified impersonating a government entity to collect information. The site was intentionally set up for this activity. Multiple malware behaviors, including doxxing, scam shop, and stolen content, were associated with the domain.
Timeline
The activity on *****[.]mx was reported on October 4, 2026. Fraudpol monitored the case from the moment the report arrived. On October 5, 2026, 13.4 hours after the report, the domain no longer resolved, leading to neutralization. The time to first action was 13.4 hours.
Indicators
- *****[.]mx
- Uses Cloudflare: yes
- Registrar: hostgator
What to do
Visitors should exercise caution with websites that mimic official government appearances. Always verify the authenticity of a government website through official channels before providing any personal information. Be wary of URLs that use terms like "gob" but do not belong to official government domains.
A member of the Fraudpol community reported *****[.]mx for confirmed abuse. Screenshots, evidence files, and reporter contact details are kept private and shared only with hosters, registrars, and law enforcement when action is required.
Reported behaviors
How this listing works
Listings are published only after verification by our team and are removed if a review shows the site is legitimate. Fraudpol never publishes full URLs, screenshots, evidence files, or the reporter's identity.