metaplex[.]sushis[.]vip

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting SushiSwap, a decentralized cryptocurrency exchange. Analysis indicates the site is designed to deceive users by mimicking the legitimate SushiSwap interface, potentially facilitating unauthorized transactions or credential harvesting under the guise of official branding. The threat type aligns with known crypto drainer tactics, where victims are tricked into connecting wallets to malicious smart contracts or fake interfaces. Infrastructure analysis reveals the domain metaplex.sushis.vip was registered on September 15, 2025, through Dynadot LLC, a registrar frequently observed in malicious domain registrations. The domain resolves to the IP address 104.21.81.185, which has been associated with other suspicious or confirmed phishing infrastructure. As of the latest assessment, the domain appears on one security blocklist (PhishDestroy) and is flagged by 2 out of 95 security vendors on VirusTotal. The page title 'Just a moment...' suggests the use of anti-bot or evasion techniques, a common trait in phishing sites attempting to delay or avoid detection by security crawlers. Mitigation against this brand impersonation threat requires immediate action from both users and security teams. Users who encountered this domain should revoke any wallet permissions granted during interaction and monitor connected accounts for unauthorized transactions. Security teams should add the domain and its resolving IP (104.21.81.185) to blocklists, while also investigating related subdomains or similarly named domains registered through the same registrar. Organizations should implement real-time domain monitoring to detect lookalike domains using variations of 'sushis' or 'metaplex' and educate users on verifying official domain structures before interacting with crypto platforms.