36679[.]vip

This domain, 36679.vip, is actively engaged in phishing operations targeting users of online gambling and sports betting platforms, specifically impersonating Macau-based services. The page title, "澳门线上娱乐首选品牌， 体育电竞投注平台_Macau Online," directly references gambling and esports betting, a common lure for credential harvesting and financial fraud. The domain is designed to mimic legitimate gambling portals, tricking users into entering sensitive account details or making fraudulent deposits under the guise of a trusted Macau entertainment brand. Analysis of the domain infrastructure reveals multiple high-risk indicators. The domain was registered on June 22, 2026, through NameMart Pte. Ltd., a registrar frequently associated with newly created phishing sites. It resolves to the IP address 19.200.13.103 and uses a Let's Encrypt SSL certificate to appear legitimate. VirusTotal reports that 10 out of 95 security vendors have flagged this domain as malicious, with detections including phishing, fraudulent gambling, and credential theft. The combination of recent registration, gambling-themed content, and low but consistent detection rates suggests an active and evolving threat. Users who have visited 36679.vip or interacted with its content should take immediate action to mitigate risk. Any credentials, payment details, or personal information entered on this site should be considered compromised. Affected individuals should change passwords for all associated accounts, enable multi-factor authentication where possible, and monitor financial statements for unauthorized transactions. Organizations should block the domain and its resolving IP (19.200.13.103) at the network level to prevent further exposure. Given the high-risk nature of this infrastructure, users are advised to verify the legitimacy of any gambling or betting platform before engaging with it.