suneq-equity[.]com

The domain suneq-equity.com was registered on 28 April 2026 through the corporate entity Fewmoretaps OU doing business as Trustname.com. The registration coincides with the deployment of a new web presence that currently returns HTTP 403 responses, indicating that content is being deliberately restricted or that the site is in a staging phase. The domain is listed as active in internal tracking and is classified under the generic_phishing taxonomy, suggesting its use in credential‑harvesting operations targeting entities associated with the equity sector.

Infrastructure analysis shows the domain resolves to the IPv4 address 31.31.198.8, which is hosted by the Russian provider REG.RU and is served by the nameservers ns1.hosting.reg.ru and ns2.hosting.reg.ru. The site employs a Let’s Encrypt R11 certificate, providing TLS encryption without revealing a paid certificate authority. The IP’s geolocation points to Russia, aligning with the registrar’s location and further confirming the regional hosting profile.

Threat intelligence sources provide limited detection data: VirusTotal has recorded zero detections out of 95 scans, and the Gridinsoft trust score is 0 out of 100, reflecting an absence of known malicious signatures but also a lack of reputation. The domain appears in a single AlienVault OTX pulse and is present on one external blocklist, where it has been flagged by PhishDestroy. These modest indicators, combined with the active status, warrant continued observation.

Uncertainties remain regarding the specific phishing kit or credential‑collection pages, as the HTTP 403 response prevents direct content inspection. Defenders should monitor DNS resolution for changes, enforce outbound filtering for the associated IP address, and incorporate the domain into URL reputation and email security controls. Ongoing collection of network traffic and user reports will be essential to determine whether the infrastructure evolves into a fully operational phishing portal.