casibom8819[.]com

The domain casibom8819.com was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is currently listed as offline. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served by the Cloudflare name servers mariah.ns.cloudflare.com and rodrigo.ns.cloudflare.com, and it does not present an SSL/TLS certificate, indicating that any HTTP service was delivered without encryption. The only observable HTTP artifact is the page title "Just a moment...," which offers no functional insight into the intended malicious payload. Multiple security controls have identified the domain as malicious.

PhishDestroy has blocked the host, and it appears on at least one external blocklist. Gridinsoft’s trust scoring system assigns a rating of 0 out of 100, effectively marking the domain as untrusted. VirusTotal analyses report that five of ninety‑three scanning engines flagged the domain, reinforcing the suspicion of malicious use. No Safe Browsing or Open Threat Exchange (OTX) entries are cited in the available data. Given the limited but consistent indicators—recent creation, lack of TLS, low trust score, blocklist presence, and multiple vendor detections—the domain aligns with the generic phishing classification and is assigned an elevated risk rating.

However, the offline status precludes real‑time probing, and the exact phishing campaign details (targeted brand, credential‑stealing page structure, or payload) remain unknown. Defenders should continue to block any outbound connections to 188.114.96.3 that resolve to casibom8819.com, enforce DNS filtering using reputable blocklists, and monitor for any re‑activation of the domain. Network telemetry should be inspected for attempts to fetch resources from this host, and any user‑reported incidents involving the "Just a moment..." page title should be escalated for deeper forensic analysis.