casibom8818[.]com

Analysis of the domain casibom8818.com indicates an elevated‑risk phishing infrastructure that has been taken offline as of the report date, July 25 2026. The domain was registered on February 27 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (ASN 13335) with the IP address 188.114.96.3 located in the United States. DNS resolution uses the Cloudflare authoritative nameservers craig.ns.cloudflare.com and elaine.ns.cloudflare.com. No TLS certificate was observed, meaning the site was served over plain HTTP; the HTTP response included the page title "Just a moment...", a placeholder often employed by malicious actors to delay analysis or to mimic legitimate browser checks.

Reputation signals are strongly negative: Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on at least one security blocklist. VirusTotal scans show that 7 of 93 antivirus and URL‑reputation engines flagged the domain, confirming malicious behavior. Independent threat‑intel feeds have listed the site on PhishDestroy’s blocklist, reinforcing the conclusion that the domain was used for credential‑harvesting or other phishing activities. The precise brand or service being spoofed has not been disclosed in the available intelligence, and no content snapshots are available; therefore the exact phishing lure remains uncertain.

Defenders should proactively block casibom8818.com at perimeter filters, DNS resolvers, and endpoint URL reputation controls. Monitoring of the associated IP address 188.114.96.3 for any future activation or re‑use is advisable, as Cloudflare‑hosted infrastructure can be repurposed quickly. Organizations using URL‑filtering solutions should ensure the domain is added to deny lists, and security teams should audit logs for any recent requests to the domain or its IP. Continuous re‑evaluation of threat feeds is recommended to capture any emerging indicators that may clarify the targeted brand or campaign details.