5960[.]org

This domain, 5960.org, is flagged as an active high-risk phishing site specializing in the impersonation of Macau Online, a well-known gambling and sports betting platform. The threat type is categorized as generic phishing with a focus on fraudulent online gambling services, targeting users seeking betting or entertainment platforms. As of the latest analysis, the domain remains operational, presenting a persistent risk to unsuspecting visitors. Analysis indicates that 5960.org is registered through Dynadot Inc, with a creation date of June 22, 2026, suggesting a recently established infrastructure. The domain resolves to the IP address 19.200.9.126 and employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. Detection metrics reveal that 8 out of 95 security vendors on VirusTotal have flagged this domain as malicious, underscoring its suspicious nature. The page title, "澳门线上娱乐首选品牌， 体育电竞投注平台_Macau Online," directly references Macau Online gambling services, reinforcing the impersonation tactic. The current status of 5960.org remains active, with no indications of takedown or mitigation efforts. Given the high-risk classification and the domain's operational persistence, immediate action is recommended. Network administrators should block traffic to and from the IP address 19.200.9.126 and add the domain to enterprise blocklists. End users are advised to avoid interacting with the site, verify the authenticity of gambling or betting platforms through official channels, and report the domain to relevant cybersecurity organizations for further investigation and potential takedown.