sunpass[.]overduekcz[.]vip

The domain sunpass.overduekcz.vip is currently flagged as an active generic phishing site with an elevated risk rating. Registration data shows it was created on October 07, 2025 through the registrar Namemart Limited, indicating a relatively recent deployment. Infrastructure analysis reveals that the domain resolves to the IPv4 address 43.153.101.139, a host that has not been associated with known legitimate services and appears on a single security blocklist.

The blocklist entry is corroborated by PhishDestroy, which has actively blocked the domain. VirusTotal scans report that 11 of 91 security vendors have identified the domain as malicious, providing additional independent confirmation of its abusive nature. No further public intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page‑title information is presently available, leaving those aspects of the site’s behavior unverified.

Defenders should continue to deny any network traffic to 43.153.101.139, enforce DNS‑level blocking for sunpass.overduekcz.vip, and monitor related hostnames for potential lateral expansion. Because the domain’s hosting environment and content have not been publicly dissected, continuous re‑evaluation with updated scanning tools is advisable to capture any changes in detection rates or new threat intelligence. Organizations employing email filtering or web gateway solutions should add the domain to their deny lists and consider sharing the indicator of compromise with industry sharing groups to broaden collective awareness.