# casprosan.site — SUSPICIOUS

> casprosan.site identified as a low-risk crypto drainer. Domain offline but flagged; avoid interaction and stay vigilant against crypto theft attempts.

## Summary
PhishDestroy identifies casprosan.site as a potentially harmful domain linked to crypto draining activities, posing a risk to users' digital assets. Although the risk level is low and the domain is currently offline, users should remain cautious.

This phishing tactic involves tricking victims into revealing their cryptocurrency wallet credentials or authorizing transactions, leading to unauthorized fund transfers. The domain was flagged by one security vendor and appears on a security blocklist, highlighting its suspicious nature.

Users are advised to avoid visiting or interacting with this domain, keep their security software updated, and monitor their crypto accounts regularly. Reporting any suspicious activity helps enhance overall digital safety.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: Welcome!

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Beget LLC
- Country: RU
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["terin.ns.cloudflare.com", "amalia.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bf942-fcfa-77cc-82e2-b94a2e598a16.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a7056bcc-6a22-4c30-9bcf-2189614fe8de
- Wayback Machine: https://web.archive.org/web/https://casprosan.site
- PhishDestroy: https://phishdestroy.io/domain/casprosan.site/
- LLM endpoint: https://phishdestroy.io/domain/casprosan.site/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casprosan.site/
Last updated: 2026-03-19