casibom-girisyap-mobil[.]com

The domain casibom-girisyap-mobil.com was registered on July 21 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It is delegated to Cloudflare DNS, using the authoritative name servers chris.ns.cloudflare.com and gail.ns.cloudflare.com, and resolves to the IPv4 address 188.114.96.3. At the time of assessment the domain remains active and has been blocked by the PhishDestroy service, indicating that it is already recognized as a malicious resource.

VirusTotal analysis reports that 1 of 91 security vendors flagged the domain, providing a concrete detection signal, and the domain appears on a single external blocklist. No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange mentions, SSL certificate details, HTTP status codes, or page‑title information is available, so the exact content and phishing vector employed by the site cannot be confirmed from the current data set. The limited age of the domain—only five days old as of this report—combined with the early detection by multiple security mechanisms elevates its risk profile to high.

Defenders should immediately add casibom-girisyap-mobil.com to internal blocklists and enforce DNS filtering to prevent resolution, monitor outbound traffic to the IP address 188.114.96.3, and consider sinkholing or redirecting any attempted connections. Continuous threat‑intel feed correlation is advised to capture any emerging indicators, such as new blocklist entries or additional vendor detections. Until a definitive takedown is confirmed, endpoint and network security controls should be configured to deny any communication with this domain, and incident response teams should be alerted to the potential for credential harvesting or other phishing‑related activity.