eqn9lr[.]web-sitemap[.]sekhemonline[.]net

This domain, eqn9lr.web-sitemap.sekhemonline.net, is identified as a brand impersonation phishing site targeting users of a Chinese entertainment platform, as suggested by the page title referencing "太阳城娱乐" (Sun City Entertainment). The domain is currently offline, but prior analysis confirms its use in fraudulent activity designed to mimic official entertainment or gaming portals to harvest credentials or personal data. Analysis indicates the domain was registered on April 19, 2026, through GoDaddy.com, LLC, and resolved to the IP address 177.210.149.197, hosted in Hong Kong. Security vendors flagged the domain as malicious, with 21 of 95 VirusTotal engines detecting it as phishing infrastructure. The SSL certificate was issued by Let’s Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility. The domain appeared on one security blocklist prior to being taken offline. Infrastructure analysis reveals this was part of a short-lived but targeted phishing campaign. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should review logs for connections to 177.210.149.197 or requests to eqn9lr.web-sitemap.sekhemonline.net, particularly from systems accessing entertainment or gaming platforms. Monitoring for similar domains registered through GoDaddy with Let’s Encrypt certificates may help identify related threats.