cdmx-bud[.]top

This domain, cdmx-bud.top, is flagged as a high-risk credential theft operation designed to deceive users through fake human verification prompts. Analysis indicates no direct brand impersonation or crypto drainer kit deployment, but the page title 'Verify you are human' suggests an attempt to mimic legitimate CAPTCHA systems to harvest sensitive credentials, such as usernames, passwords, or multi-factor authentication codes. The absence of a recognizable brand target implies a broad, opportunistic campaign rather than a targeted phishing attack. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 43.166.217.161 and was registered on July 03, 2026, through NameSilo, LLC. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. VirusTotal reports 9 out of 95 security vendors flagging this domain as malicious, while the server technologies include Caddy and HTTP/3, which may be leveraged to evade detection or improve performance. No Google Safe Browsing (GSB) status or blocklist count is currently available, but the domain's recent creation date and active status raise concerns about its legitimacy. As of the latest assessment, cdmx-bud.top remains active, with no evidence of takedown or mitigation efforts. Users are advised to block the domain at the network level and avoid interacting with any pages hosted on it. Organizations should update endpoint protection rules to include this domain and its associated IP address in deny lists. Given the high-risk classification and active status, continued monitoring is recommended to track any shifts in infrastructure or additional malicious payloads. The use of Let's Encrypt SSL does not guarantee safety, and users should treat any requests from this domain as fraudulent.