m[.]sun792[.]com

This domain, m.sun792.com, is flagged as a high-risk generic_phishing threat designed to impersonate the Sun City gambling platform. Analysis of the page title, "澳门·太阳城·APP (在线登录)集团官方网站," indicates an attempt to deceive users into believing they are accessing the legitimate Sun City mobile application or official website. The domain appears to function as a credential harvester, likely targeting users of online gambling services in the Macau region. No specific drainer kit signatures have been identified in initial scans, but the infrastructure aligns with common phishing toolkits used for financial fraud. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 168.76.230.185 and was registered through Realtime Register B.V. On VirusTotal, 17 out of 95 security vendors have flagged this domain as malicious. The domain appears on one security blocklist, specifically PhishDestroy, and is not currently listed on Google Safe Browsing. The SSL certificate is issued by Let's Encrypt (R12), a common choice among threat actors due to its free and automated issuance process. The registration date of the domain remains undisclosed in available intelligence, but its active status and low detection count suggest it may be relatively new. As of the latest verification, m.sun792.com remains active and continues to host the phishing content. No takedown actions have been observed, and the domain remains accessible via standard web requests. The remaining risk is classified as high due to the domain's operational status, targeted impersonation of a financial service, and the potential for credential theft leading to financial loss. Users are advised to avoid interaction with this domain, and network administrators should implement blocking measures for the IP address 168.76.230.185. Monitoring for additional domains registered through the same registrar or resolving to the same IP may help identify related phishing infrastructure.