m[.]js89908[.]com

This domain, m.js89908.com, is flagged as an active high-risk phishing site impersonating a Macau-based casino, specifically targeting users of the 'Macau Sands International Entertainment City' brand as indicated by its page title '澳门金沙国际娱乐城-在线投注.' Registered on April 3, 2026, through COSMOTOWN, INC., the domain resolves to IP address 154.89.77.208, hosted on AS142286 (LUOGELANG (FRANCE) LIMITED) in Hong Kong. Infrastructure analysis reveals the use of Nginx as the web server, with detected technologies including Bootstrap, HSTS, Baidu Analytics, and HTTP/3. The domain is secured with a Let's Encrypt SSL certificate (YR2), a common choice for both legitimate and malicious sites. Security vendors have identified this domain as malicious, with 18 out of 91 engines on VirusTotal flagging it at the time of assessment. It appears on at least one security blocklist and is actively blocked by PhishDestroy. The nameservers ns1.domainnamedns.com and ns2.domainnamedns.com are associated with the domain, though their reputation is not independently verified here. Gridinsoft assigns the domain a trust score of 0/100, further indicating its high-risk status. While the exact nature of the phishing content remains unconfirmed due to the absence of direct page analysis, the combination of brand impersonation, recent registration, and security vendor detections strongly suggests malicious intent. Defenders should treat this domain as a confirmed phishing threat, particularly for users engaging with online gambling platforms. Immediate blocking at the DNS or network level is recommended, along with monitoring for related domains registered through the same registrar or hosted on the same IP range.