io-sushiswap-v2[.]pages[.]dev

This domain impersonates a legitimate cross-chain decentralized exchange (DEX) to deceive users into connecting wallets or entering sensitive credentials. The site displays a fabricated interface mimicking SushiSwap V2, complete with branding and technical terminology such as 'Next-Gen Cross-Chain DEX,' but is designed to harvest private keys, seed phrases, or other authentication details. Victims may unknowingly authorize malicious transactions or expose funds to theft under the guise of accessing a trusted platform.

Analysis indicates the domain was registered on October 29, 2025, through Cloudflare, Inc., and is currently hosted on Cloudflare infrastructure (IP: 188.114.96.3). Security vendors on VirusTotal flagged this domain, with 7 out of 95 engines detecting malicious activity. The SSL certificate (WE1) and use of Cloudflare’s content delivery network are consistent with tactics used to lend false legitimacy to phishing sites, while the domain’s recent creation date aligns with common phishing campaign timelines.

If you visited io-sushiswap-v2.pages.dev and connected a wallet or entered credentials, immediately revoke all active session permissions for the affected wallet. Transfer assets to a new, secure wallet and monitor transaction history for unauthorized activity. Scan the device used for access with updated security tools to detect potential malware. Report the incident to the impersonated platform’s official security channels and consider filing a report with relevant cybersecurity organizations to aid in domain takedown efforts.