tradesushi[.]top

This domain is flagged as a high-risk brand impersonation threat targeting SushiSwap, a decentralized finance platform. Analysis indicates the infrastructure is designed to deceive users into interacting with fraudulent interfaces, likely harvesting credentials or facilitating unauthorized transactions. The domain exhibits characteristics consistent with phishing campaigns, including misleading page titles and obfuscated hosting details. Infrastructure analysis reveals tradesushi.top resolves to the IP address 188.114.96.3 and was registered through Dynadot LLC on June 03, 2026. The domain is currently active and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt (serial number E8), and the page title is falsely set to 'Google,' a tactic often used to evade detection or mislead users. Mitigation steps for this specific threat type include immediate blacklisting of the domain and associated IP address within network security controls. Organizations should update endpoint protection rules to block access to tradesushi.top and monitor for related indicators of compromise, such as unusual transaction patterns or unauthorized login attempts. Users should be educated on verifying domain authenticity before interacting with decentralized finance platforms, particularly those involving cryptocurrency transactions. Additionally, security teams should review logs for connections to 188.114.96.3 and investigate any anomalous activity linked to this infrastructure.