casib0madres[.]com

PhishDestroy identifies casib0madres.com as an active crypto drainer phishing domain currently under investigation for malicious intent. This domain masquerades as a legitimate charitable organization to deceive victims into connecting crypto wallets, resulting in fund theft. The threat remains active as of the latest analysis, with operators actively refining lures to evade detection.

This domain was flagged by 0 of 95 VirusTotal vendors but exhibits multiple red flags: it resolves to IP 45.10.243.69, is registered through Fewmoretaps OU d/b/a Trustname.com, and was created on March 13, 2026. The SSL certificate is issued by Let's Encrypt, providing a false sense of legitimacy. Additionally, this domain follows a pattern consistent with recent crypto drainer campaigns targeting Spanish-speaking users by impersonating maternal health charities. Trust scores from threat intelligence platforms remain critically low, and blocklist inclusion is pending due to the recency of the domain.

The current status of casib0madres.com is active and evolving. Given the high risk of cryptocurrency loss and the domain’s recent registration, users are strongly advised to avoid interaction entirely. Verify any URLs using PhishDestroy’s real-time scanner before engaging. If this domain was encountered in email, messages should be reported to relevant abuse teams. Website owners are urged to block IP 45.10.243.69 and the domain at network and DNS levels to prevent further compromise. Monitor crypto wallet connections for unsolicited requests from unknown domains.