suncorenegry[.]live

This domain, suncorenegry.live, is identified as a phishing site specializing in AI-assisted trading scams, currently marked as offline. It impersonates Suncor Energy, a legitimate energy company, to deceive users into disclosing sensitive credentials or financial information under the guise of an official trading platform. The page title explicitly claims to be the 'Official Platform for AI Assisted Trading,' a tactic designed to exploit trust in both the energy sector and emerging AI-driven financial services. Analysis indicates the domain was flagged by 7 of 95 security vendors on VirusTotal, a notably elevated detection rate for a recently established site. It was registered on June 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The domain resolves to IP address 172.67.189.179, which hosts additional suspicious infrastructure. It appears on one security blocklist and holds a Gridinsoft trust score of 0/100, reinforcing its classification as malicious. The SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. The domain is currently offline, likely due to takedown efforts or operational suspension by the threat actor. Organizations and individuals are advised to block this domain at the network level and monitor for related indicators of compromise, including the IP address and registrar details. Security teams should update detection rules to include the domain name, SSL certificate issuer, and associated infrastructure. Users who may have interacted with this site should reset credentials, enable multi-factor authentication, and review financial accounts for unauthorized activity. Proactive threat hunting for similar domains registered under the same registrar or resolving to the same IP is recommended to mitigate further risk.