onlinecasinomalaysia[.]fyi

Analysis of the domain onlinecasinomalaysia.fyi indicates active phishing infrastructure targeting online gambling users. The domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, and remains operational as of July 12, 2026. It resolves to the IP address 185.111.111.154, hosted under DataCamp Limited in Germany. Infrastructure analysis reveals the use of nameservers kiki.bunny.net and coco.bunny.net, a configuration often observed in rapidly deployed phishing campaigns. The domain is flagged by one security blocklist and appears in a single AlienVault OTX threat intelligence pulse, suggesting limited but confirmed malicious activity. Four out of 91 security vendors on VirusTotal have detected this domain as malicious, though the specific payload or phishing kit remains unconfirmed. The SSL certificate is issued by Let's Encrypt (serial E8), a common choice for both legitimate and malicious sites due to its free and automated issuance process. The HTTP response code 302 indicates a redirect, though the destination is not yet analyzed. Defenders should treat this domain as high-risk due to its recent registration, association with known phishing infrastructure, and confirmed detections. Network-level blocking is recommended, particularly in environments where online gambling or financial transactions occur. Further investigation into the redirect chain and any associated payloads is advised to determine the full scope of the threat.