harrisassetsltd[.]com

Analysis indicates that the domain harrisassetsltd.com is being used as a phishing platform employing the Airdrop Scam kit. The site presents a page titled “Bot Verification” and is classified with a high risk level. The malicious intent aligns with the generic_phishing category, and the current status is active as of the report date, July 12, 2026.

Infrastructure mapping shows that the domain was registered through Cosmotown, Inc. on November 11, 2022 and is served by a single nameserver. DNS resolution points to the IPv4 address 191.96.56.192, which belongs to AS47583 Hostinger International Limited and is geolocated in the United States. The web server presents a Let's Encrypt R12 certificate and responds with an HTTP 301 redirect. Detected server‑side components include PHP, while client‑side libraries comprise Bootstrap, LiteSpeed, Smartsupp, Slick, OWL Carousel, jQuery CDN, and jQuery.

Reputation scoring is uniformly negative; Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist, where it is listed by PhishDestroy. VirusTotal analysis records that 2 out of 95 security vendors flag the domain as malicious, reinforcing the high‑risk assessment despite the limited number of detections.

Defenders should prioritize immediate containment by adding the host to DNS and proxy deny lists, and by enforcing outbound filtering for connections to 191.96.56.192. Continuous monitoring of the associated IP and any newly observed sub‑domains is advised, as the active status suggests ongoing credential‑harvesting campaigns. Additional forensic capture of HTTP traffic to the “Bot Verification” endpoint may provide further indicators for intrusion‑detection signatures.