olas[.]sushi-com[.]lol

This domain, olas.sushi-com.lol, is confirmed to operate as a brand impersonation site specifically targeting SushiSwap, a decentralized finance platform. The site mimics legitimate SushiSwap interfaces to deceive users into disclosing wallet credentials, seed phrases, or approving malicious transactions. The primary threat vector involves social engineering tactics designed to exploit trust in the SushiSwap brand, potentially leading to unauthorized asset transfers or account takeovers. Analysis indicates the domain was registered on June 08, 2026, through Dynadot Inc, and currently resolves to the IP address 172.67.210.7. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy. Security vendors on VirusTotal flagged the domain at a 6/95 detection rate, and it appears on three independent security blocklists. Additionally, the page title is set to 'Google,' a tactic likely intended to evade casual detection or mislead users during initial inspection. Users who visited olas.sushi-com.lol should immediately revoke any wallet permissions granted to the site and transfer assets to a new, secure wallet if interaction occurred. Monitor connected accounts for unauthorized transactions and enable multi-factor authentication where available. If credentials were entered, assume compromise and update passwords on all associated platforms. Security teams should add the domain to internal blocklists and alert users to the specific threat, emphasizing the risk of brand impersonation in decentralized finance contexts.