tree[.]sushiswap[.]art

PhishDestroy has identified tree.sushiswap.art as a brand impersonation domain specifically targeting SushiSwap, a decentralized exchange protocol. This domain is currently offline under investigation, but its registration and configuration raise significant security concerns for cryptocurrency users. The domain's title, "Just a moment...", is a common placeholder used by phishing sites to evade detection while loading malicious content or redirecting users to credential harvesting pages.

The domain tree.sushiswap.art was registered on September 16, 2025 through Dynadot LLC and resolves to IP address 188.114.96.3, which is associated with Cloudflare's CDN. VirusTotal analysis shows 0 detections out of 95 security vendors, indicating that this malicious domain has not yet been flagged by mainstream security solutions. However, it appears on one security blocklist, suggesting that at least one threat intelligence source has identified it as suspicious. The domain lacks an SSL certificate, which is unusual for legitimate services and adds to the risk profile. These technical indicators point to a carefully crafted phishing infrastructure designed to bypass initial security checks.

Given that the domain impersonates SushiSwap, a well-known DeFi brand, users who encounter it should exercise extreme caution. PhishDestroy recommends avoiding any interaction with tree.sushiswap.art or similar domains. If users have already visited the site, they should change their passwords and enable two-factor authentication on all associated accounts. The domain is currently offline, but users should monitor for reactivation and report any future sightings to security teams. Stay vigilant against brand impersonation and crypto drainer threats by verifying URLs and using trusted bookmarks for accessing DeFi platforms.