trade-sushi[.]top

This domain, trade-sushi.top, is flagged as a high-risk brand impersonation threat targeting SushiSwap, a decentralized cryptocurrency exchange. Analysis indicates the domain is designed to deceive users into interacting with fraudulent interfaces, likely deploying a cryptocurrency drainer kit to siphon assets from compromised wallets. The threat type is classified as brand impersonation, a tactic commonly used to exploit trust in established platforms for financial fraud. Infrastructure analysis reveals the domain was registered on June 03, 2026, through Dynadot LLC, and resolves to the IP address 104.21.53.150. It is currently blocked by three security blocklists and has been flagged by 11 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt (serial number E7), a detail that may lend false legitimacy to the site. The domain's page title is undefined, a common characteristic of hastily deployed phishing infrastructure. No Google Safe Browsing (GSB) status is provided, but the domain's presence on multiple blocklists underscores its malicious intent. As of the latest assessment, trade-sushi.top remains active, posing an ongoing risk to users who may inadvertently interact with it. Response actions by security providers, including blocking by PhishDestroy, MetaMask, and SEAL, mitigate but do not eliminate the threat. Users are advised to verify domain authenticity before connecting wallets or entering credentials, particularly for cryptocurrency-related services. The high risk level is justified by the domain's active status, confirmed brand impersonation, and detection by multiple security mechanisms. Organizations should monitor for related indicators of compromise (IOCs) and update blocklists accordingly.