Protocol-impersonator domain registered (typosquat)

Evidence summary #

CONFIRMED. Washington State DFI issued a formal fraud alert confirming sswapap.vip as an advance-fee scam fraudulently impersonating the legitimate sunswap.com/sun.io DEX. A Washington resident accessed the platform at www.sswapap.vip and lost >$9,000. The scheme prevented withdrawals until a $50,000 additional deposit was made (undisclosed condition). DFI explicitly labels this as a fraudulent digital asset trading platform named SunSwap — impersonating the real protocol. A second related impersonator domain sswapep.vip is also named in protocol profile §10. The DFI alert represents a state-regulator-level confirmation of active brand impersonation. Per taxonomy F161 definition: a typosquat of the official domain is registered within last 90 days. Precise registration date not obtained (domain monitoring feed required); WA DFI alert confirms active exploitation which supersedes the 90-day window heuristic. Impersonation scheme includes social engineering (victims recruited via dating

Sources #

Methodology #

Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.

See the full factor methodology and distribution across all protocols →