app[.]sunwsap[.]net

app.sunwsap.net was registered on 21 February 2026. The site’s sole observable attribute is the page title “www.app.sunwsap.net”, which matches the fully qualified domain name. Infrastructure analysis shows a Gridinsoft trust score of 0 out of 100, indicating an extremely low reputation. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, confirming that it was identified as a phishing vector.

VirusTotal scans recorded 12 detections out of 93 participating security vendors, reinforcing the malicious classification. The site’s current HTTP status is offline, and the domain has been taken down, but the historical evidence remains sufficient for continued mitigation. No IP address, autonomous system number, hosting provider, or SSL certificate details are available in the supplied intelligence, leaving the hosting infrastructure uncharacterized.

Likewise, the specific phishing campaign content, target brand, or lure technique has not been disclosed, so the exact attack vector cannot be described beyond the generic phishing label. Defenders should continue to block traffic to app.sunwsap.net at the DNS and network layers, update intrusion detection signatures with the observed domain name, and monitor for any re‑registration or resurrection attempts. Ongoing correlation with threat‑intel feeds that reference the 12 VirusTotal detections will aid in early identification of related campaigns.