albonus500[.]com

Analysis indicates that albonus500.com is an active phishing domain targeting users with a fraudulent $750 gift card offer. The domain was registered on February 24, 2026, through TuringSign Inc. (operating as Cosmotown) and currently resolves to the IP address 194.145.208.24, hosted in the Netherlands under KnownSRV Ltd. Infrastructure analysis reveals the use of nameservers ns11.knownsrv.com and ns12.knownsrv.com, a common pattern in low-cost bulletproof hosting setups. The page title, 'Complete Your Registration - $750 Gift Card,' explicitly suggests a lure designed to harvest personal or financial information under the pretense of a reward. The domain appears on one security blocklist and is currently flagged by PhishDestroy, though no detections were recorded in a recent scan by 91 vendors. This absence of detections does not confirm safety, as phishing domains often evade initial detection through obfuscation or delayed malicious activity. The site remains accessible with an HTTP 200 status and uses a Let's Encrypt SSL certificate (YR2), a common tactic to appear legitimate. Defenders should treat this domain as high-risk due to its active status, known infrastructure, and clear phishing indicators. Network-level blocking is recommended, along with monitoring for credential submission or data exfiltration patterns associated with this domain. Further analysis of the site's content and backend behavior is pending to determine the exact data collection methods or redirection chains.