bananas31[.]sushiswap[.]art

The domain bananas31.sushiswap.art is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate SushiSwap service, posing an elevated risk of cryptocurrency theft. As of the latest verification, bananas31.sushiswap.art has been taken offline, though its prior activity remains a concern for potential victims.

Technical analysis of bananas31.sushiswap.art reveals limited detection but clear indicators of malicious intent. The domain was flagged by 1 of 95 VirusTotal security vendors, specifically Trustwave, and appeared on 1 security blocklist (PhishDestroy). Registered through Dynadot LLC on September 16, 2025, it resolved to the IP address 188.114.97.3, hosted by Cloudflare in the US (AS13335). No SSL certificate was present, and the observed page title was 'Just a moment...'. The domain used Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and had a Gridinsoft trust score of 0/100.

Users who interacted with bananas31.sushiswap.art should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including the impersonated brand (SushiSwap), the registrar (Dynadot), and security services like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.