sunswapp-exchangg-us[.]pages[.]dev

PhishDestroy identifies sunswapp-exchangg-us.pages.dev as an active crypto drainer domain under investigation. The site mimics a legitimate swap interface to deceive users into connecting crypto wallets, enabling unauthorized fund transfers. Current status remains active with no takedown executed as of this report. This domain was flagged by 2 of 95 VirusTotal vendors at the time of analysis. It was registered through Cloudflare, Inc. and resolves to IP 172.66.45.12 via Google Trust Services SSL. The domain operates under Cloudflare Pages and has not been listed on any major blocklists or threat intelligence feeds. No historical data is available regarding its creation date. Trust scores from DNS, WHOIS, and SSL analysis remain neutral due to the absence of detections. Despite zero detections, the domain’s behavior and infrastructure align with known crypto drainer campaigns leveraging trusted services to evade detection. Immediate action is required: block sunswapp-exchangg-us.pages.dev at the network perimeter, disable access via content filters, and warn users against visiting or interacting with the site. Monitor wallet addresses used in connection attempts for outgoing transactions. This domain should be treated as a high-risk threat until proven otherwise.