sundogupdate[.]live

The domain sundogupdate.live was registered on 21 April 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to 188.114.96.3, a Cloudflare edge address located in Canada. Authoritative nameservers are nile.ns.cloudflare.com and joselyn.ns.cloudflare.com, indicating the domain is fully proxied behind Cloudflare. The site presents a TLS certificate issued by Let’s Encrypt (E7), but an HTTP request returns a 403 status code and the page title is “Just a moment…”, suggesting the front‑end is currently inaccessible or deliberately blocked. Threat intelligence sources classify the domain as a credential‑phishing vector and assign a high risk rating. Gridinsoft assigns a trust score of 0 / 100, and two out of ninety‑four VirusTotal scanners have flagged the host. AlienVault OTX lists the domain in a single pulse, and PhishDestroy has added it to its blocklist; it also appears on one additional security blocklist. Analysis indicates the infrastructure is typical of fast‑flux phishing campaigns that rely on Cloudflare’s CDN to hide origin servers. No further information about the landing page content or targeted brands is available. Defenders should block the domain at DNS and proxy layers, monitor for outbound connections to 188.114.96.3, and update detection signatures to include the observed TLS fingerprint and page title. Continuous re‑evaluation is advised, as the site remains active and may later serve credential‑harvesting forms.