adreslerri-casibom[.]vip

This domain, adreslerri-casibom.vip, is an active phishing site registered on February 21, 2026, through NiceNIC International Group Co., Limited. The page title, 'Hawkins & Clarke | Global Asset Recovery Division,' suggests a fraudulent scheme targeting individuals or organizations involved in asset recovery or financial services. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3, hosted on Cloudflare's network (AS13335), and employs Cloudflare nameservers (newt.ns.cloudflare.com, wren.ns.cloudflare.com). The site uses an SSL certificate issued by Google Trust Services (WE1) and supports HTTP/3, alongside external resources loaded via jsDelivr. As of July 12, 2026, the domain remains operational, though it returns an HTTP 521 status, which may indicate server-side issues or deliberate evasion tactics. Six of 93 security vendors on VirusTotal have flagged the domain, and it appears on at least one blocklist (PhishDestroy). The Gridinsoft trust score of 0/100 further corroborates its malicious classification. No specific phishing kit or additional brand impersonation details are confirmed beyond the page title. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where financial or asset recovery services are relevant. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats. Given the use of Cloudflare, takedown efforts may require direct engagement with the hosting provider or registrar. The domain's recent registration and active status warrant continued vigilance, as threat actors may pivot infrastructure or content to evade detection.