sundaeswapfi[.]com

This domain, sundaeswapfi.com, is identified as a generic phishing site targeting users of the SundaeSwap decentralized finance platform. Analysis confirms the domain is currently offline, displaying a suspended page notice from Hostwinds Support. The threat type is classified as credential and financial data theft through deceptive imitation of legitimate cryptocurrency services. Infrastructure analysis reveals the domain was registered through Eranet International Limited on April 05, 2025, and resolves to the IP address 104.168.140.29, hosted by AS54290 (Hostwinds LLC) in the United States. Detection metrics indicate the domain was flagged by 9 of 95 security vendors on VirusTotal, with an SSL certificate issued under the R11 root. It appears on one security blocklist and is actively blocked by PhishDestroy. The suspended page title, 'Website Suspended Contact Hostwinds Support,' suggests recent takedown efforts, though residual risk remains due to prior malicious activity. Current status confirms the domain is offline, but users should remain vigilant against similar phishing attempts. It is recommended to verify domain authenticity through official channels, monitor for unauthorized transactions, and report any suspicious activity to relevant security teams. Organizations should update blocklists to include this domain and its associated IP to prevent future exposure.