casiveraresmigirisi[.]vip

The domain casiveraresmigirisi.vip is currently active and classified as a generic phishing site. Infrastructure analysis shows the domain resolves to the Cloudflare‑hosted address 104.21.33.168, which is associated with Cloudflare, Inc. in Canada. The authoritative name servers are eve.ns.cloudflare.com and sean.ns.cloudflare.com, and the SSL certificate is issued by Google Trust Services under the WE1 profile. HTTP requests receive a 301 redirect, and the page title returned is "casiveraresmigirisi.vip | 520: Web server is returning an unknown error." The domain is listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal records indicate that 4 of 91 scanned security vendors have raised detections for the domain. Registration information lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. While the specific brand or credential target of the phishing lure has not been disclosed, the combination of Cloudflare front‑end, active blocklist presence, and multiple vendor detections suggests a credible threat. Defenders should block DNS resolution to 104.21.33.168, monitor outbound connections to the domain, and add the domain to internal URL filtering lists. Given the high risk rating, incident response teams should treat any user‑initiated traffic to this domain as potentially malicious and investigate related authentication attempts.