sunswaap-v2-eng-us[.]pages[.]dev

PhishDestroy identifies active brand impersonation targeting Solana on the domain sunswaap-v2-eng-us.pages.dev.

The page claims to be 'Sunswap V2 – Next-Gen Decentralized Exchange on Solana,' a direct phonetic and visual mimicry of the legitimate SunSwap protocol on Solana. PhishDestroy has classified this as brand impersonation for the purpose of stealing user credentials or funds under the guise of a legitimate decentralized exchange. The domain remains active and accessible as of the latest scan.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating it has yet to be widely recognized as malicious despite the impersonation. It is registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy. No blocklist entries or trust score degradation were detected in available threat intelligence feeds at the time of analysis.

The phishing lure attempts to deceive users searching for the legitimate SunSwap DEX on Solana by using a domain spelling variant (swap vs. swaap) and claiming association with Solana. PhishDestroy recommends immediate blocklisting of the domain and IP 188.114.96.3 at the network perimeter. Users should verify exchange URLs via official Solana or SunSwap documentation before entering credentials or connecting wallets. This domain should be treated as untrusted until further forensic analysis is completed.