sushi[.]com-wallet-v3-apps-api-connect[.]com

The domain sushi.com-wallet-v3-apps-api-connect.com was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The host presents an SSL certificate labelled “WE1”, indicating that transport encryption is in place but provides no additional validation of the site’s legitimacy. HTTP requests return an “Access Denied” page title, suggesting that the server is deliberately blocking content access, which is consistent with a takedown or a defensive block.

Reputation data shows that the domain appears on a single security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain. VirusTotal analysis records four detections out of ninety‑five scanned engines, confirming that multiple security vendors have identified malicious behavior. The site is classified as a crypto‑related scam that impersonates the SushiSwap brand, aligning with the declared brand target “SushiSwap” and the scam type “Crypto Scam”.

Given the elevated risk rating, defenders should add the domain to internal block lists, monitor outbound connections to the associated IP address, and enforce TLS inspection to capture any hidden payloads if the site reappears. Continuous observation of Cloudflare‑hosted infrastructure is advised, as threat actors frequently leverage shared services to rotate domains. At present, no further forensic artifacts such as page content, JavaScript, or credential‑stealing modules have been released, leaving the exact attack vector unknown. Organizations that interact with the SushiSwap ecosystem should treat any unsolicited communications referencing this domain as malicious and educate users to verify URLs against official SushiSwap channels.