# ibizasexpills.com.mx — SUSPICIOUS

> ibizasexpills.com.mx is a credential theft domain with 0/95 VirusTotal detections. Registered on 2019-02-03 via RaXa Mexico. Avoid interacting with this site.

## Summary
PhishDestroy identifies ibizasexpills.com.mx as an active credential theft domain designed to trick users into surrendering login credentials under false pretenses. The site masquerades as a legitimate service, likely targeting victims through phishing campaigns or malicious advertisements. Security tools have not yet flagged this domain, leaving potential victims exposed to account takeovers and financial fraud.  This domain was flagged after resolving to IP 15.235.118.111 and obtaining an SSL certificate from Let's Encrypt, a common tactic to appear trustworthy. Registered through RaXa Mexico on February 3, 2019, the domain has flown under the radar with 0 detections out of 95 scans on VirusTotal, indicating a low current detection rate despite its malicious intent. The age of the domain suggests it may have been operational for years without drawing significant attention from security vendors.  If you visited ibizasexpills.com.mx, immediately change any passwords entered on the site and enable multi-factor authentication on all linked accounts. Scan your device for malware using reputable antivirus software and monitor financial accounts for unauthorized activity. Report the domain to your organization’s security team or to PhishDestroy’s abuse channels to help block future access. Avoid revisiting the site entirely, as it may deploy additional malicious payloads or collect further sensitive data.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2019-02-03 00:00:00
- Registrar: RaXa Mexico
- IP: 15.235.118.111

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0509ec3d-6dd3-4dc8-917d-25c23e1512ce
- PhishDestroy: https://phishdestroy.io/domain/ibizasexpills.com.mx/
- LLM endpoint: https://phishdestroy.io/domain/ibizasexpills.com.mx/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ibizasexpills.com.mx/
Last updated: 2026-03-26