tradesushi[.]biz

This domain is actively impersonating SushiSwap, a decentralized finance protocol, to deceive users into interacting with fraudulent smart contracts or disclosing wallet credentials. Analysis indicates the site mimics legitimate DeFi interfaces, likely prompting visitors to connect cryptocurrency wallets under false pretenses, such as claiming rewards or executing token swaps. The infrastructure is designed to harvest sensitive information or facilitate unauthorized transactions, posing a direct financial threat to users. Infrastructure analysis reveals the domain was registered on June 03, 2026, through Dynadot Inc, and currently resolves to the IP address 188.114.97.3. It is flagged by 5 out of 95 security vendors on VirusTotal and appears on three distinct security blocklists. The SSL certificate, issued by Let’s Encrypt (serial number E8), does not mitigate the risk, as the domain’s page title misleadingly displays 'Google,' a tactic often used to evade detection or confuse users. The domain remains active and is explicitly blocked by multiple security mechanisms. Users who have visited tradesushi.biz should immediately revoke any connected wallet permissions associated with the site. If credentials or private keys were entered, affected wallets must be considered compromised, and funds should be transferred to a new, secure wallet. Additionally, users should review transaction histories for unauthorized activity and report the domain to relevant security platforms for further mitigation. No further interaction with the domain should occur, and browser-based security tools should be employed to block future access.