robertclerkchambers[.]com

Analysis of robertclerkchambers.com indicates a high-risk phishing domain targeting legal or professional services. The domain was registered on April 11, 2026, and remains active as of July 12, 2026, resolving to IP 198.251.81.49 (FranTech Solutions, US). Infrastructure reveals WordPress, PHP, MySQL, and LiteSpeed technologies, alongside jQuery and Font Awesome, suggesting a templated or kit-based deployment. The page title, 'Robert Clerk Law Chambers – We apply law to facts,' aligns with a fabricated legal practice, though no specific brand impersonation is confirmed in available data. MX records point to mail.robertclerkchambers.com with priority 10, which may facilitate credential harvesting via email-based phishing campaigns. The domain is flagged by 5 of 91 security vendors on VirusTotal and appears on one blocklist. Trust scores from Gridinsoft and Scamadviser are both 24/100, reinforcing its suspicious classification. Registration details trace to Fewmoretaps OU (Trustname.com), a registrar frequently associated with malicious domains. Nameservers (ns1/ns2.codehubhosting.com) further link to hosting providers commonly exploited for phishing infrastructure. Defenders should treat this domain as active and hostile. Immediate actions include blocking the domain and its resolving IP (198.251.81.49) at perimeter security controls, monitoring for internal connections to the domain or its MX record, and investigating any user reports of contact from robertclerkchambers.com or its subdomains. Email filters should quarantine messages originating from the domain or its associated mail server. Given the domain’s age (3 months) and persistent activity, assume ongoing phishing operations unless new intelligence proves otherwise.