mothers[.]land
“Mothers: Most Popular Online Crypto Casino Based on Blockchain”
mothers.land — Contenido no disponible. Suplantación de marca: Genericcrypto; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 14/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Registrador: NameCheap.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain mothers.land indicates it was a confirmed crypto-based gambling scam operating under the guise of an online casino. The domain was registered on February 21, 2026, through NameCheap, Inc., and resolved to IP address 172.67.142.231, hosted on Cloudflare's infrastructure (AS13335). The page title, 'Mothers: Most Popular Online Crypto Casino Based on Blockchain,' explicitly advertised a blockchain gambling platform, aligning with the identified 'Gambler Scam' phishing kit. Detection vendors flagged this domain on July 23, 2026, with 14 of 93 security engines on VirusTotal classifying it as malicious. It appeared on one security blocklist (PhishDestroy) and was included in a single AlienVault OTX threat intelligence pulse, further corroborating its malicious classification.
The domain's SSL certificate was issued by Google Trust Services (WE1), a common practice among threat actors leveraging legitimate certificate authorities to lend credibility. Nameservers were configured as sureena.ns.cloudflare.com and jakub.ns.cloudflare.com, consistent with Cloudflare's DNS infrastructure. Gridinsoft assigned a trust score of 1/100, indicating a high likelihood of malicious intent. As of the report date, the domain has been taken offline, though residual risks may persist if the infrastructure is repurposed.
Defenders should treat this domain as part of a broader crypto scam campaign. Historical resolution data, SSL fingerprints, and registrar details can be used to identify related infrastructure. Monitoring for re-registration or similar domains under NameCheap with Cloudflare hosting may help preempt future iterations of this scam. The exact content and functionality of the site remain unanalyzed, but the available evidence confirms its role in fraudulent gambling operations.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Historial de denuncias de abuso · 3 stored reports over 42 days · click to expand
-
Report #1 Mar 5, 2026 · 01:52 UTCPhishing Abuse Report: mothers[.]landabuse@namecheap.com
-
Report #2 ICANN CC 33h still active Mar 6, 2026 · 11:11 UTCESCALATION #2 (33h active): Phishing - mothers[.]landabuse@namecheap.com abuse@identitydigital.com compliance@icann.org
-
Report #3 ICANN CC 986h still active Apr 15, 2026 · 07:17 UTCESCALATION #3 (986h active): Phishing - mothers[.]landabuse@namecheap.com abuse@identitydigital.com compliance@icann.org
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
PD-1772675536-mothers.land Recipient: abuse@namecheap.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.