sunacas[.]com

sunacas.com is currently flagged as a crypto‑scam infrastructure that was taken offline as of the report date (23 July 2026). The domain was registered on 9 October 2025 through Dominet (HK) Limited and uses Cloudflare’s DNS service (darwin.ns.cloudflare.com, sierra.ns.cloudflare.com). DNS resolution points to IP 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. and geolocated to the United States. No TLS certificate was observed, indicating the site was served over plain HTTP. The page title returned by the server reads “Sunacas: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the classified scam type “Crypto Scam”.

The infrastructure matches the “Gambler Scam” phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling platforms. Threat‑intelligence aggregators have recorded the domain on at least one security blocklist, and PhishDestroy explicitly blocks it. VirusTotal analysis shows that 13 of 95 AV engines flagged the domain, reinforcing the malicious assessment. Gridinsoft assigned a trust score of 0 / 100, the lowest possible rating, further confirming its malicious nature. The lack of an SSL certificate, combined with the low trust score and multiple vendor detections, suggests the site was deliberately engineered to avoid secure communications and to increase the likelihood of credential or wallet capture.

Uncertainties remain regarding the exact payload delivered to victims, as no sandbox or content sample is available in the current dataset. Additionally, the presence of only one blocklist entry may reflect limited sharing rather than a low operational footprint. Defenders should add sunacas.com to internal block and allow‑list exclusions, monitor DNS queries for the associated Cloudflare IP range, and enforce TLS‑only policies to prevent accidental connections to non‑encrypted endpoints.