setup-sunswaap-eng[.]pages[.]dev

PhishDestroy identifies setup-sunswaap-eng.pages.dev as an active cryptocurrency phishing domain designed to harvest wallet credentials and private keys. Security vendor reports show this site is flagged by 2 out of 95 engines on VirusTotal, indicating limited but confirmed malicious activity. The domain resolves to IP 188.114.97.3 and is registered through Cloudflare, Inc., leveraging the company’s Pages service to appear legitimate while hosting fraudulent content. This domain was flagged specifically for cryptocurrency phishing, a high-risk threat that targets users by impersonating legitimate services to steal digital assets. PhishDestroy’s analysis confirms it is resolved to IP 188.114.97.3 and registered through Cloudflare, Inc., commonly used to obscure malicious infrastructure behind legitimate hosting providers. The site’s low-but-present detection rate (2/95) suggests stealthy operation, likely spreading through targeted spam or social engineering attacks. If you visited setup-sunswaap-eng.pages.dev, immediately disconnect from the internet and scan your device for malware using a reputable antivirus tool. Never enter wallet passwords, seed phrases, or private keys into any website. Revoke any exposed API keys or credentials immediately via your wallet provider’s official platform. Report the domain to PhishDestroy or your cybersecurity team for further analysis and blacklist inclusion.