sunwukongdex[.]com

Analysis of sunwukongdex.com shows a newly registered domain (created 21 February 2026) that was configured to resolve to Cloudflare’s edge address 172.67.182.76, located in the United States under ASN 13335 (Cloudflare, Inc.). The authoritative nameservers are nikon.ns.cloudflare.com and oaklyn.ns.cloudflare.com, indicating the domain was fully protected by Cloudflare’s DNS and CDN services. The TLS certificate issued by Google Trust Services (WE1) validates the HTTPS endpoint, and the site employed HSTS and HTTP/3, typical of modern web infrastructure. The page title returned by the server, “SunWukong DEX | Justin Sun’s TRON Perpetual Futures & DeFi Trading Platform”, explicitly references a cryptocurrency exchange and a well‑known public figure, aligning with the classified “Crypto Scam” category.

Two of ninety‑three VirusTotal scanners flagged the domain, and the blocklist service PhishDestroy has already listed it, confirming that at least some security vendors observed malicious behavior. Gridinsoft assigned a trust score of 0 / 100, reinforcing the low credibility of the site. The registrar record shows registration through NiceNIC International Group Co., Limited. No additional evidence of payload delivery, credential harvesting, or command‑and‑control activity is present in the current data set; the site’s content has not been captured beyond the title, and the domain is presently taken offline.

Given the converging evidence—newly created domain, Cloudflare‑hosted IP, crypto‑oriented page title, low trust score, vendor detections, and blocklist inclusion—the domain should be treated as a confirmed phishing infrastructure targeting cryptocurrency users. Defenders should ensure that sunwukongdex.com is added to network deny lists, monitor DNS queries for re‑registration or re‑use of the same Cloudflare IP range, and consider reviewing related domains that share the same nameservers or SSL issuer.