sunyeh[.]com[.]tw

PhishDestroy identifies sunyeh.com.tw as a generic phishing domain actively impersonating a login portal to harvest credentials. The domain was registered on March 17, 2023, through PCHOME and resolves to IP 188.114.97.3. No specific drainer kit has been identified yet, but the domain is currently under investigation for phishing activity targeting unsuspecting users. The low detection rate on VirusTotal suggests it may be newly active or employing evasion techniques.

Technical indicators reveal this domain has a VirusTotal detection score of 2/95, indicating no security vendors flagged it as malicious at the time of analysis. The registrar is PCHOME, and the domain resolves to IP 188.114.97.3. It was created on March 17, 2023, and holds a valid SSL certificate issued by Google Trust Services. No known blocklist entries were found during the initial assessment, though further analysis may uncover additional indicators.

This domain remains active with a status of under_investigation, posing an ongoing risk to users who may interact with it. Security researchers are advised to monitor this domain closely and consider blocking IP 188.114.97.3 at the network level. Users should avoid entering credentials on this domain until further notice. The current risk level is under_investigation, but users should exercise caution due to the domain's active status and low detection rate.