sushiswap-v3-uploaded[.]pages[.]dev

The domain sushiswap-v3-uploaded.pages.dev is currently flagged as an active brand impersonation threat targeting SushiSwap, a decentralized finance protocol. Analysis indicates this domain is designed to deceive users by mimicking the official SushiSwap platform, specifically promoting fraudulent liquidity pools under the guise of "SushiSwap V3 Concentrated Liquidity." The domain remains operational and poses a high risk to users who may unknowingly interact with it, potentially leading to financial loss or credential theft. Infrastructure analysis reveals that sushiswap-v3-uploaded.pages.dev was registered on October 15, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.47.103, hosted on Cloudflare’s network (AS13335). The domain has been flagged by 6 of 95 security vendors on VirusTotal, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common practice for both legitimate and malicious domains leveraging Cloudflare’s infrastructure. The page title, "Better Returns: Earn More Trading Fees with SushiSwap V3 Concentrated Liquidity," directly mirrors the branding and value propositions of the legitimate SushiSwap platform, increasing the likelihood of user deception. As of the latest assessment, sushiswap-v3-uploaded.pages.dev remains active and unmitigated. Users and organizations are strongly advised to block access to this domain at the network level and include it in endpoint protection rules. Financial platforms and decentralized application (dApp) browsers should update their blocklists to prevent interactions with this domain. Individuals who may have engaged with the domain should immediately revoke any connected wallet permissions, transfer assets to a secure wallet, and monitor for unauthorized transactions. Given the high-risk nature of this impersonation, ongoing vigilance and proactive threat intelligence sharing are recommended to mitigate further exposure.