app[.]saucerswsap[.]finance

The domain app.saucerswsap.finance is currently active and classified as a generic phishing threat with a high risk rating. The site returns HTTP 200 responses and lacks an SSL certificate, indicating unencrypted communication. Registration data shows the domain was created on 21 February 2026 through Tucows Domains Inc., and it resolves to the IP address 52.223.13.41, which is associated with an AWS Global Accelerator endpoint in Canada. Nameserver records point to ns1.renewyourname.net and ns2.renewyourname.net. Threat intelligence indicates that one of ninety‑three VirusTotal scanners flagged the domain, and two independent blocklists (PhishDestroy and ScamSniffer) have listed it. The Gridinsoft trust score of 35/100 further reflects low credibility. At present, no additional content analysis is available beyond the page title, which mirrors the domain name. Defenders should consider adding the domain and its resolving IP to blocklists, monitor for any traffic anomalies targeting the IP, and enforce TLS enforcement for outbound connections to prevent accidental data exposure. Ongoing observation is recommended to detect any evolution in the payload or hosting infrastructure.