sunpass[.]overduekco[.]vip

This report analyzes the active domain sunpass.overduekco.vip, which has been classified as an elevated risk for generic phishing as of July 29, 2026. The domain is currently operational and exhibits several concrete indicators of abuse. It was created on October 07, 2025, and registered through Namemart Limited, a registrar sometimes associated with rapid domain provisioning for ephemeral or potentially malicious use cases. Notably, sunpass.overduekco.vip now appears on at least one recognized security blocklist, specifically flagged and blocked by PhishDestroy. This indicates that security vendors have identified the domain as a threat, and corresponding automated defenses may already restrict access for protected users.

Further infrastructure analysis confirms that the domain resolves to IP address 43.153.101.139. VirusTotal data shows that 14 out of 91 security vendors currently flag this domain as malicious or otherwise unsafe. This detection rate, while not universal, is a significant indicator of potential phishing or related fraudulent activity. The combination of recent registration and rapid listing on blocklists supports the assessment of ongoing abuse. There is, however, no direct evidence from Safe Browsing, OTX, SSL certificate details, or HTTP status included in the available intelligence, and the precise web content of the domain has not yet been analyzed. As such, the specific nature of the phishing attempt cannot be further categorized at this time.

Defenders should regard sunpass.overduekco.vip as a verified threat based on multiple vendor detections and blocklist inclusion. Immediate action is recommended, including network-level blocking and continued monitoring for related infrastructure or emergent indicators. Security teams should exercise caution and treat all interactions with this domain as potentially hostile until further detailed content analysis can be performed.