polymarket[.]sushi[.]us[.]com

The domain polymarket.sushi.us.com has been identified as a brand impersonation threat targeting the cryptocurrency platform SushiSwap. The domain impersonates SushiSwap with a page title 'Stake POLY | Sushi 🍣', suggesting it may be used to mislead users into performing actions that could compromise their assets or personal information.

Infrastructure analysis reveals that the domain resolves to the IP address 104.21.32.1. The domain has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. On VirusTotal, the domain has a detection score of 0/95, meaning it has not yet been flagged by the security engines. The domain is currently listed on one security blocklist and is blocked by PhishDestroy. The creation date of the domain is not provided, but the low trust score and presence on a blocklist suggest recent or ongoing malicious activity.

The domain is currently offline, which may indicate that the threat has been mitigated or that the operators have temporarily taken it down. Despite the domain being offline, the risk level remains under investigation due to the potential for the infrastructure to be reactivated or repurposed. Security teams are advised to continue monitoring the domain and to educate users about the risks of interacting with suspicious or unverified SushiSwap-related domains.