sunswap[.]eu[.]cc

PhishDestroy identifies sunswap.eu.cc as a live phishing domain masquerading as Uniswap to steal cryptocurrency funds. Visitors are prompted to connect wallets and sign fraudulent transactions that drain assets directly from connected accounts. The site mimics Uniswap’s branding and interface to trick users into approving malicious token approvals or transferring funds to attacker-controlled addresses. This domain was flagged on October 13, 1997, and currently shows zero detections out of 95 VirusTotal scans. It resolves to IP address 186.2.175.25 and uses a Let’s Encrypt SSL certificate for credibility. The domain is registered through Gname.com Pte. Ltd., a registrar known for hosting high volumes of fraudulent domains. Despite its age, the domain has been recently repurposed for malicious activity targeting decentralized finance users. If you visited sunswap.eu.cc, immediately disconnect your wallet, revoke any unauthorized token approvals via tools like revoke.cash, and scan your device for malware. Do not interact with the site further. Report the domain to your wallet provider and relevant platforms such as PhishDestroy or Chainabuse to help block its distribution. Monitor your wallet and transaction history for suspicious activity for at least 30 days.