suardium[.]com

Analysis of the domain suardium.com, created on February 27 2026 and hosted by Hostinger International Limited (AS47583) in Cyprus, indicates an elevated‑risk brand‑impersonation phishing campaign. The domain resolves to IP address 2.57.91.140 and uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. No SSL certificate is presented, meaning all HTTP traffic is unencrypted. The page title retrieved from the live host reads “Suardium Token | Official Website – Secure Presale & High Bonus Rewards,” suggesting the site attempts to lure victims with a cryptocurrency presale narrative.

The infrastructure is already flagged by PhishDestroy and appears on one external blocklist, providing an early indicator of malicious intent. VirusTotal scans show that two of ninety‑three security vendors have identified the domain as malicious, reinforcing the suspicion despite the limited vendor consensus. What remains uncertain is the exact content served to visitors, the presence of any credential‑harvesting forms, and whether the site is still reachable, as the current status is listed as offline.

Defenders should proactively block the domain name and its resolved IP address at network perimeter devices, add the associated nameservers to deny lists, and monitor for related look‑alike domains registered through the same registrar. Continuous re‑scanning with multi‑vendor services is recommended to capture any changes in detection scores, and any future HTTPS deployment should be inspected for certificate anomalies. Organizations receiving phishing reports referencing “Suardium Token” or similar presale offers should treat the incident as high priority, isolate affected user accounts, and advise users to avoid interacting with the domain until a full takedown is verified.