sunswapcom-exchange[.]pages[.]dev

The domain sunswapcom-exchange.pages.dev is a phishing site engaged in brand impersonation targeting cryptocurrency users. It mimics the MEXC exchange under the false identity 'SunSwap Exchange – Decentralized Crypto Trading' to deceive victims into disclosing login credentials or transferring funds. No drainer kit was observed, but the site poses an elevated risk due to its cryptocurrency scam classification. As of the latest verification, sunswapcom-exchange.pages.dev has been taken offline.

Technical indicators confirm the domain's malicious nature. Only 1 of 95 VirusTotal security vendors flagged sunswapcom-exchange.pages.dev, specifically Trustwave, while Google Safe Browsing did not detect it. The domain appears on one security blocklist, PhishDestroy, and is registered through Cloudflare, Inc., with a creation date of February 21, 2026. It resolves to the IP address 172.66.47.70, hosted on Cloudflare's network (AS13335) in the US, and uses an SSL certificate issued by Google Trust Services / WE1. Nameservers are dave.ns.cloudflare.com and summer.ns.cloudflare.com.

Users who interacted with sunswapcom-exchange.pages.dev should immediately change their MEXC account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or logins. Report the phishing domain to MEXC's official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.