sunofhope[.]fund

Analysis of the domain sunofhope.fund indicates active brand impersonation targeting charitable or humanitarian foundations. The domain, registered on June 2, 2022, through a Russian registrar, resolves to the IP address 179.43.157.103 and remains operational as of July 12, 2026. The page title explicitly references 'The international public foundation "Sun of Hope" is a fund that helps,' suggesting an attempt to mimic legitimate philanthropic organizations. Infrastructure review reveals the use of Ruby on Rails, Apache HTTP Server, Phusion Passenger, and Google services such as reCAPTCHA and Google Tag Manager. The SSL certificate is issued by GlobalSign nv-sa. The domain appears on two security blocklists and is flagged by PhishDestroy and BLP-Malware. Gridinsoft assigns a trust score of 0/100, further supporting its classification as malicious infrastructure. AlienVault OTX records the domain in 24 threat intelligence pulses, indicating prior detection by multiple security entities. While three of 95 security vendors on VirusTotal flag the domain, the exact nature of the impersonation—whether for credential harvesting, fraudulent donations, or other malicious activity—remains unconfirmed due to limited public analysis of the site's functionality. Defenders should treat this domain as high-risk and consider blocking or monitoring traffic to it. Additional investigation into associated IP addresses and registration patterns may help identify related infrastructure.