onlinecasinomalaysia[.]fans

The domain onlinecasinomalaysia.fans is currently active and has been classified as a generic phishing site with a high risk rating. Technical analysis shows it resolves to the IPv4 address 185.111.111.156, which is registered to DataCamp Limited in Germany. The authoritative name servers are kiki.bunny.net and coco.bunny.net, both suggesting the use of a shared DNS service often associated with fast‑flux or disposable hosting. An HTTPS endpoint is present, secured by a Let’s Encrypt certificate (issuer E7), but the web server returns an HTTP 403 response and the page title is "403 Forbidden," indicating that the content is not directly accessible at the time of inspection. The domain was created on 28 April 2026 through the registrar FewMoreTaps OÜ. Reputation data shows a Gridinsoft trust score of 0 / 100, detection by five of ninety‑one VirusTotal scanners, inclusion on a single public blocklist, and a single mention in an AlienVault OTX pulse. PhishDestroy has also listed the domain as blocked. While the exact phishing payload or target pages have not been observed, the combination of recent registration, low trust score, and multiple security vendor detections confirms a malicious intent. Defenders should immediately block the domain and its associated IP at perimeter defenses, add it to URL filtering and email security policies, and monitor the authoritative name servers for any rapid changes. Ongoing DNS and SSL certificate monitoring is advised to detect potential re‑use of the infrastructure for new phishing campaigns.