app[.]sunwsap[.]sbs

The domain app.sunwsap.sbs was registered through NiceNIC International Group Co., Limited and created on March 05, 2026. Infrastructure analysis shows it resolves to IP address 188.114.96.3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The domain is serviced by Cloudflare DNS using the nameservers alexis.ns.cloudflare.com and brianna.ns.cloudflare.com. Detected technologies include Cloudflare Browser Insights, Cloudflare, and HTTP/3, indicating the site leveraged Cloudflare's edge services.

No SSL certificate is present, and the HTTP response currently returns the page title "404 Not Found," confirming that the site is offline at the time of analysis. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans reported that three of ninety‑four security vendors flagged the domain, providing limited but notable malicious indication. The lack of a valid SSL certificate, combined with the offline status and the 404 page title, prevents direct observation of any phishing content or the specific brand being impersonated.

Consequently, the exact lure or credential‑ harvesting method remains uncertain. Defenders should immediately block DNS resolution to 188.114.96.3 for app.sunwsap.sbs, add the domain to internal blocklists, and monitor for any re‑registration or re‑activation attempts. Ongoing surveillance of Cloudflare‑associated IP ranges and the associated nameservers is recommended to detect potential reuse. Continuous review of threat intelligence feeds for new detections related to this domain will help maintain situational awareness.