kogesushi[.]top

This domain, kogesushi.top, is actively flagged as a high-risk brand impersonation site targeting SushiSwap, a decentralized cryptocurrency exchange. Registered on May 18, 2026, through Dynadot LLC, the domain resolves to IP address 172.67.191.72, hosted on Cloudflare infrastructure in Canada. Infrastructure analysis reveals the use of Cloudflare nameservers (buck.ns.cloudflare.com and emily.ns.cloudflare.com) and a Let's Encrypt SSL certificate (E8), which are common among both legitimate and malicious sites but do not mitigate the threat in this case. The domain is currently active, returning an HTTP 302 redirect status, though the destination remains unconfirmed. The page title is reported as 'Google,' which may indicate an attempt to mislead users or evade detection by security tools. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged in one AlienVault OTX threat intelligence pulse. A single security vendor on VirusTotal has detected this domain as malicious, though this limited detection count does not diminish the confirmed risk. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. Defenders should treat this domain as a confirmed phishing threat targeting SushiSwap users, likely aiming to harvest credentials, private keys, or facilitate unauthorized transactions. Given its active status and infrastructure, immediate blocking at the DNS or network level is recommended. Further analysis of the redirect destination and any associated cryptocurrency addresses or scripts may provide additional indicators of compromise.