sushiswaap-trade-en-us[.]pages[.]dev

Analysis indicates that sushiswaap-trade-en-us.pages.dev is an active brand_impersonation domain designed to imitate SushiSwap. The observed page title, "SushiSwap Exchange | SushiSwap Trade Guide," aligns with the targeted brand and suggests an attempt to create legitimacy through visual and textual similarity. Such infrastructure is commonly associated with user redirection, credential collection, wallet interaction abuse, or other forms of deceptive engagement intended to exploit trust in a recognized brand.

Technical review identified a VirusTotal detection score of 1/95 security vendors. The domain remains active and resolves to IP address 172.66.47.12. Infrastructure records indicate registration through Cloudflare, Inc., with domain creation dated April 28, 2026. Hosting location data maps to CA through Cloudflare infrastructure. The SSL certificate is issued by Google Trust Services / WE1. Intelligence sources show appearance on 1 security blocklist, with blocking attributed to PhishDestroy. No additional blocklist prevalence was observed beyond the documented count of 1.

Current assessment classifies the domain as high risk due to active status, brand impersonation behavior, and continued availability to potential victims. Although only 1 of 95 vendors currently flags the domain, low detection prevalence should not be interpreted as benign activity. Recommended response actions include immediate blocking at network, DNS, proxy, and email security layers; monitoring for related indicators; reviewing access logs for prior connections; and investigating any user interaction with the site. Residual risk remains elevated while the domain stays online and capable of presenting deceptive content to visitors.