koin50asli[.]it[.]com

This domain, koin50asli.it.com, is flagged as a generic phishing site targeting users of online gambling and slot gaming platforms. Analysis of the page title, 'KOIN50 : Slot Hari Ini Server Vip,' indicates an attempt to impersonate legitimate gambling services to harvest user credentials, payment details, or other sensitive information. The domain does not appear to be associated with a known drainer kit but employs common phishing tactics such as mimicking trusted brands and leveraging urgency-driven messaging. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 29, 2026, through Intis Telecom Limited and resolves to the IP address 188.114.96.3. It is currently flagged by 1 security blocklist and has a VirusTotal detection score of 2/95 security vendors. The domain is hosted behind Cloudflare, a common obfuscation tactic to evade takedowns and mask origin servers. Detected technologies include PHP, Bootstrap, AMP, LiveChat, jQuery, Google Analytics, and Facebook Pixel, suggesting an attempt to mimic legitimate site functionality and track victim interactions. The Gridinsoft trust score for this domain is 0/100, further confirming its malicious nature. The domain has been taken offline, reducing immediate risk to users. However, the infrastructure remains registered until 2026, and the registrar has not been notified of abuse in this report. The low VirusTotal score (2/95) indicates limited detection, and the use of Cloudflare may complicate further investigation. Users who accessed this domain should assume credential compromise, rotate passwords for associated accounts, and monitor for unauthorized transactions. Organizations should block the domain and IP 188.114.96.3 at the perimeter and update security controls to detect similar phishing attempts targeting gambling or financial services.