sushiswap[.]me

Analysis of sushiswap.me indicates that the domain was registered on March 18 2026 through Cloudflare, Inc. The authoritative nameservers are ligia.ns.cloudflare.com and ryan.ns.cloudflare.com, both belonging to Cloudflare's DNS service. The domain resolves to the IP address 172.67.136.178, which is part of Cloudflare’s edge network, making attribution to a specific hosting provider or geographic location difficult. VirusTotal records show that 14 of 91 scanning engines have flagged the domain as malicious, reinforcing the suspicion raised by external blocklists. The domain is currently listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, all of which classify it as a generic phishing infrastructure.

The threat intelligence record assigns a high risk level and marks the status as active, consistent with ongoing phishing campaigns. Available evidence does not include a publicly observed page title, SSL certificate details, or any attribution to a known phishing kit. Consequently, the precise content served by the site remains unknown, and no brand or service is explicitly referenced in the collected data. Defenders should treat sushiswap.me as a hostile domain.

Immediate mitigation steps include adding the domain and its resolving IP address to network deny lists, updating web proxy and DNS filtering rules, and ensuring that endpoint protection solutions incorporate the 14 vendor detections from VirusTotal. Continuous monitoring of the domain’s DNS resolution and any changes in blocklist status is recommended, as Cloudflare‑hosted domains can be repointed quickly. Given the active high‑risk designation, organizations handling cryptocurrency‑related traffic should be especially vigilant.