sushiswapp-exchangg-eng[.]pages[.]dev

PhishDestroy identifies sushiswapp-exchangg-eng.pages.dev as an active domain engaged in SushiSwap brand impersonation, designed to deceive users into interacting with fraudulent cryptocurrency exchange services. This threat is currently under investigation as the domain mimics SushiSwap’s legitimate branding and interface to harvest credentials and digital assets. The impersonation leverages visual replication of SushiSwap’s web assets to establish trust and facilitate illicit transactions. This domain was flagged by 2 of 95 VirusTotal vendors, indicating it has not yet been widely detected by automated security engines. It is registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and utilizes a Google Trust Services SSL certificate. The domain is hosted on Cloudflare Pages, a platform commonly abused for rapid phishing deployment due to its legitimate infrastructure and evasion capabilities. At the time of analysis, the domain remains unblocked by major threat intelligence platforms. Although current detection is low (0 detections on VirusTotal), the domain is active and poses a credible risk to users seeking SushiSwap services. It combines high-reputation infrastructure (Cloudflare, Google Trust Services) with active brand abuse. Users should avoid clicking links or entering credentials. Security teams are advised to block the domain at DNS and network levels and monitor for further campaign expansion. Immediate reporting to SushiSwap and relevant CERT teams is recommended to accelerate takedown.