sunperpdex[.]org

sunperpdex.org has been confirmed as a crypto drainer scam actively targeting cryptocurrency users under the guise of a decentralized exchange aggregator. PhishDestroy’s analysis identifies this domain as an elevated-risk threat due to its deployment of malicious smart contracts designed to drain victim wallets upon interaction. The site exploits user trust in legitimate DEX platforms by mimicking familiar interfaces and branding, specifically targeting those seeking to swap tokens or interact with decentralized finance protocols. Immediate user caution is advised, as any wallet connection or transaction approval on this domain could result in irreversible asset loss.

PhishDestroy identifies sunperpdex.org as a high-risk crypto drainer with multiple technical indicators confirming its malicious intent. This domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but concerning detection. The site resolves to IP address 216.198.79.1 and was registered through Spaceship, Inc. on September 19, 2025, making it a recently deployed threat with minimal historical reputation. Its SSL certificate, issued by Let’s Encrypt, provides a false sense of legitimacy despite the domain’s malicious nature. The combination of recent registration, low detection rates, and association with known crypto drainer infrastructure elevates the risk profile to an active and evolving threat.

Mitigation for users exposed to sunperpdex.org requires immediate action to prevent financial loss. If any interaction—such as wallet connection or transaction approval—has already occurred, users must revoke malicious smart contract permissions via tools like Revoke.cash or similar blockchain security platforms. Never interact with this domain for token swaps or DeFi operations. Always verify URLs through PhishDestroy’s real-time scanner before accessing any crypto-related site. Use hardware wallets or trusted interfaces for all transactions, and enable transaction simulation features if available. Report this domain to relevant authorities, including the hosting provider and blockchain security teams, to aid in takedown efforts. Stay vigilant: newly registered domains with low detection rates are prime targets for crypto drainer campaigns.