linkcasihash[.]info

Analysis of the domain linkcasihash.info indicates an active phishing campaign leveraging an 'Age Verification' pretext, as evidenced by the page title and HTTP 302 redirect behavior. The domain was registered on March 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals hosting on a Netherlands-based IP address, 162.252.198.197, operated by BL Networks. The server runs Ubuntu with an Nginx web stack and uses a Let's Encrypt SSL certificate (serial E7), which provides encryption but does not validate legitimacy. Detection data from security vendors shows 16 of 91 engines flagging the domain as malicious, while it appears on one security blocklist. The domain resolves to nameservers ns1.anycastdns.cz and ns2.anycastdns.cz, a configuration commonly observed in bulletproof hosting setups. No specific brand impersonation is confirmed beyond the 'Age Verification' page title, and the exact phishing mechanism remains unanalyzed due to lack of direct access to the site content. Defenders should treat this domain as high-risk based on its registration profile, hosting infrastructure, and detection metrics. Immediate action includes blocking the domain and IP at perimeter controls, monitoring for internal connections, and investigating potential credential harvesting or malware distribution vectors. The use of a 302 redirect suggests the campaign may dynamically route victims, warranting further analysis of downstream infrastructure.