started-sushiswap-v3[.]pages[.]dev

The domain started-sushiswap-v3.pages.dev has been identified as a potential brand impersonation threat targeting the decentralized trading platform SushiSwap. This domain is currently active and was created on October 30, 2025, indicating recent malicious activity. The page title associated with this domain reads, 'SushiSwap v3: Complete Beginner’s Guide to Advanced Decentralized Trading,' which suggests an intent to mislead users into believing they are accessing legitimate resources related to SushiSwap.

The domain is registered through Cloudflare, Inc., which may provide some level of obfuscation regarding the true identity of the operators. The SSL certificate is issued by Google Trust Services, contributing to an appearance of legitimacy. However, the security score from Gridinsoft is 0 out of 100, indicating a highly suspicious domain status. Furthermore, it is currently listed on one security blocklist and has been specifically blocked by PhishDestroy, raising concerns regarding its potential use for phishing or other malicious activities.

In terms of technical infrastructure, the domain resolves to the IP address 172.66.45.41 and employs modern web technologies including HSTS, Cloudflare, and HTTP/3. Despite these advanced configurations, the domain has not yet been flagged by VirusTotal, showing 0 detections from a total of 95 checks. This lack of detection does not confirm the domain's safety; it merely reflects the current status of automated scanning.

Defenders should remain vigilant regarding this domain and consider implementing measures to block or monitor access to it, given its active status and brand impersonation tactics. Users are advised to verify the authenticity of any communications or links purporting to be from SushiSwap, especially those that direct them to this domain.