lasvegas108[.]com

This domain, lasvegas108.com, is identified as a credential theft phishing site designed to deceive users of online gambling platforms. Analysis of the page title, 'LASVEGAS108 : LASVEGAS 108 Dunia Taruhan Yang Terjangkau!', suggests an attempt to impersonate a legitimate gambling service, likely targeting Indonesian-speaking users. No direct evidence of a crypto drainer kit or brand impersonation of a major corporation was observed, but the site’s infrastructure and content align with credential harvesting tactics commonly used in phishing campaigns. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered through NameSilo, LLC, on April 28, 2026, with an anomalous future creation date suggesting potential domain spoofing or typosquatting. It resolves to the IP address 154.18.187.152, a host previously associated with malicious activity. Security vendor detections on VirusTotal stand at 5 out of 95, while Gridinsoft assigns a trust score of 0 out of 100. The domain appears on one security blocklist and is referenced in a single threat intelligence pulse on AlienVault OTX. The SSL certificate is issued by Let’s Encrypt, a common but neutral indicator, as it is frequently used by both legitimate and malicious sites. The domain has been taken down, mitigating immediate user exposure. However, residual risk remains due to the domain’s registration details and historical associations with phishing infrastructure. Organizations should monitor for re-registration or re-emergence under similar naming conventions. Users who may have interacted with the site are advised to reset credentials for any gambling or financial platforms accessed during the exposure window. Security teams should update blocklists to include the domain and associated IP address to prevent future access attempts.