sushiswap-v2-project[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat targeting Ledger users. Analysis indicates the site presents itself as a SushiSwap v2® Wallet Guide, tricking victims into entering sensitive wallet credentials or recovery phrases under the guise of legitimate wallet integration. The specific threat involves credential harvesting and potential cryptocurrency theft through social engineering tactics. Infrastructure analysis reveals the domain sushiswap-v2-project.pages.dev was registered on October 25, 2025, through Cloudflare, Inc. It resolves to IP address 188.114.96.3 (AS13335, Cloudflare, Inc., US). The SSL certificate is classified as WE1, and the domain appears on 1 security blocklist. VirusTotal detection shows 7 out of 95 security vendors flagging the domain as malicious. The page title, 'SushiSwap v2® Wallet Guide: Getting Started, Login,' directly impersonates Ledger branding while leveraging the SushiSwap name to appear legitimate. Mitigation steps include immediate blocking of the domain and IP address within network security controls. Users should be educated to verify domain authenticity before entering credentials, particularly for cryptocurrency-related services. Organizations should monitor for connections to 188.114.96.3 and alert on any attempts to access sushiswap-v2-project.pages.dev. Given the high-risk nature of this threat, incident responders should treat any interaction with this domain as a potential compromise of sensitive wallet data.