p1[.]adca[.]click

Analysis indicates that the domain p1.adca.click was registered through Sav.com, LLC and first observed on September 23, 2025. The authoritative nameservers augustus.ns.cloudflare.com and laura.ns.cloudflare.com resolve the domain to the IPv4 address 178.16.53.103, which belongs to AS202412 Omegatech LTD located in the Netherlands. No TLS certificate is presented, meaning the site was served over plain HTTP. The only visible page title returned by the server reads “Site is created successfully!”, providing no indication of the targeted brand or service.

VirusTotal has recorded detections from 16 of 93 scanning engines, and the domain appears on a single external blocklist. Independent reputation services assign a Gridinsoft trust score of zero out of one hundred, and the domain has been flagged by the PhishDestroy feed. Current network measurements show the host is offline, confirming that the site is no longer reachable. The combination of a recent registration, Cloudflare‑mediated DNS, lack of encryption, low trust rating, and multiple vendor detections strongly suggests the domain was used for a generic phishing campaign.

Defenders should ensure that the IP address 178.16.53.103 is added to firewall and DNS blocklists, monitor for any re‑hosting of the same content under different hostnames, and consider updating intrusion‑detection signatures to include the observed page title string. Continuous monitoring of the associated ASN and the registrar Sav.com, LLC may reveal future infrastructure reuse. Because the site is offline, immediate remediation focuses on preventing reuse of the same infrastructure rather than takedown.