vegas969jkt[.]com

This domain is flagged as an elevated-risk generic phishing threat targeting users through fraudulent online gaming promotions. Analysis of the infrastructure indicates it operates as a fake platform luring victims with promises of a 'New Member 100% To Kecil' bonus, a common tactic in credential harvesting and financial fraud schemes. Infrastructure analysis reveals the following technical indicators: the domain vegas969jkt.com resolves to IP address 104.18.15.111 and was registered through NameCheap, Inc. on May 05, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. Security vendors flagged the domain in 1 of 95 VirusTotal scans, while it appears on one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. The domain’s Gridinsoft trust score is 0/100, and it has been blocked by PhishDestroy. Notably, the site uses a Google Trust Services SSL certificate, which may mislead users into perceiving it as trustworthy. Mitigation steps for this specific threat type include immediate domain blocking at the network level, particularly for endpoints in regions where Indonesian-language phishing lures are prevalent. Organizations should monitor for connections to 104.18.15.111 and correlate logs with user reports of unsolicited gaming bonus offers. End-users should be educated on recognizing fraudulent bonus schemes, especially those using urgency-driven language like 'New Member' promotions. Financial institutions should flag transactions linked to this domain or its associated IP for enhanced fraud review, given the high likelihood of credential theft or unauthorized fund transfers.