auth-sushiswap-trade-io-us[.]pages[.]dev

This domain, auth-sushiswap-trade-io-us.pages.dev, is actively engaged in brand impersonation targeting Across, a decentralized finance protocol. The site presents itself as a legitimate SushiSwap Exchange interface, designed to deceive users into disclosing sensitive credentials or authorizing malicious transactions. Analysis confirms the domain is currently operational and poses a high-risk threat due to its deceptive branding and active phishing infrastructure. Infrastructure analysis reveals the domain was registered on October 25, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.141, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued under the WE1 root. Security telemetry indicates the domain is flagged by 5 of 95 vendors on VirusTotal, with one active security blocklist entry. The page title, 'SushiSwap Exchange,' directly conflicts with the impersonated brand, Across, further confirming its fraudulent intent. The domain remains active as of the latest verification, continuing to host the phishing page. Users and organizations are advised to block the domain and its resolving IP at the network level. Security teams should monitor for credential submissions or wallet interactions originating from this infrastructure. End-users who may have interacted with the site should revoke any connected wallet permissions and rotate exposed credentials immediately. Additional scrutiny of domains leveraging Cloudflare Pages with similar naming patterns is recommended to identify related threats.