# casibom-ggirislerindn.vip — MALICIOUS

> Avoid casibom-ggirislerindn.vip – a high-risk phishing site. Stay vigilant and do not share personal info on this suspicious domain.

## Summary
PhishDestroy identifies casibom-ggirislerindn.vip as a high-risk generic phishing domain actively targeting unsuspecting users. The domain's threat level is categorized as high due to its malicious intent and ongoing activity that aims to deceive individuals into divulging sensitive information.

This domain was created recently on December 20, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, which has been associated with suspicious registrations. VirusTotal flags casibom-ggirislerindn.vip as malicious, with 11 out of 95 security vendors detecting it as a threat. The domain resolves to IP 104.21.53.122, linking it to infrastructure often exploited for phishing campaigns. The presence of a generic page title, "Hawkins," further suggests attempts to disguise its true purpose.

To mitigate risks, users and organizations should block access to this domain and refrain from interacting with any content hosted there. PhishDestroy confirms the domain's status as active and advises continuous monitoring for any further phishing attempts. Prompt action in updating security measures and educating users about this threat is essential to avoid compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Hawkins

## Domain Intelligence
- Registered: 2026-03-09 09:07:01
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.53.122
- Nameservers: newt.ns.cloudflare.com wren.ns.cloudflare.com

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "CRDF", "CyRadar", "Ermes", "Forcepoint ThreatSeeker", "Fortinet", "Kaspersky", "Lionic", "SOCRadar", "Trustwave", "Webroot", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd1c7-0545-736c-8d9b-0a6baf8db009.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3a334e25-b743-411c-b725-d2030bf03958
- PhishDestroy: https://phishdestroy.io/domain/casibom-ggirislerindn.vip/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casibom-ggirislerindn.vip/
Last updated: 2026-03-14