sushiswap-exchangee-io-us[.]pages[.]dev

The domain sushiswap-exchangee-io-us.pages.dev has been identified as a high-risk brand impersonation threat targeting the decentralized finance platform SushiSwap. This domain mimics SushiSwap’s branding and page title "SushiSwap Exchange | SushiSwap Trade | Decentralized Crypto Trading" to deceive users and potentially harvest credentials or drain crypto assets. There is no specific drainer kit mentioned, but the impersonation tactic alone poses significant danger to unsuspecting users.

Technical analysis reveals that this domain resolves to the IP address 188.114.97.3 and is registered through Cloudflare, Inc. It currently holds an SSL certificate issued by Google Trust Services, which may enhance its credibility to victims. VirusTotal reports a low detection rate, with only 1 out of 95 security vendors flagging the domain, indicating it is still largely under the radar. The domain remains active with no Google Safe Browsing (GSB) status or blocklist data provided, but its registration and hosting details suggest it is leveraging major infrastructure providers to maintain uptime.

At present, sushiswap-exchangee-io-us.pages.dev continues to operate, posing a persistent threat to users who might mistake it for the legitimate SushiSwap platform. Immediate response actions should include blocking access to this domain within corporate and personal security controls, monitoring for related phishing attempts, and educating users about verifying official SushiSwap URLs. Despite the low VirusTotal detection, the high risk from brand impersonation warrants urgent mitigation to prevent credential theft or crypto asset loss.