web-aslierdex[.]icu

This domain, web-aslierdex.icu, is identified as a credential harvesting phishing site designed to deceive users into disclosing sensitive login credentials. Analysis indicates the infrastructure was actively used to host fraudulent login portals, though no specific brand impersonation has been confirmed. The domain is currently offline, but prior activity warrants elevated scrutiny due to its malicious intent and technical indicators. Infrastructure analysis reveals the domain was registered on June 06, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolved to the IP address 188.114.97.3. It appears on two security blocklists and has been flagged by 7 of 95 security vendors in VirusTotal assessments. Additional threat intelligence confirms its presence in one AlienVault OTX pulse, while Gridinsoft assigned it a trust score of 0/100. The domain employed Cloudflare and HTTP/3 technologies, which are commonly used to obfuscate malicious activity and evade detection. The SSL certificate, issued by Google Trust Services, further suggests an attempt to appear legitimate despite its fraudulent purpose. Current status indicates the domain has been taken offline, likely due to enforcement actions or infrastructure changes. However, the technical indicators and historical activity confirm its role in phishing operations. Organizations and users are advised to block the domain and its associated IP address (188.114.97.3) at the network level. Security teams should monitor for related domains registered through the same registrar or resolving to the same IP range. End-users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available. Proactive threat hunting for indicators of compromise linked to this domain is recommended to mitigate residual risk.