web-sushiswap-exchange[.]pages[.]dev

Analysis of web-sushiswap-exchange.pages.dev shows a newly registered domain (created April 04 2026) that is hosted behind Cloudflare’s network (nameservers amy.ns.cloudflare.com and hunts.ns.cloudflare.com) and resolves to IP 188.114.97.3, a Cloudflare‑owned address located in Canada. The site presents the page title “SushiSwap Exchange: Modern DeFi Trading Revolution” and is explicitly linked to the SushiSwap brand, indicating a brand‑impersonation attempt. The SSL certificate is issued by Google Trust Services (WE1), confirming that HTTPS is functional but offering no assurance of legitimacy. Reputation signals are poor: Gridinsoft assigns a trust score of 0 / 100, and VirusTotal records detections from 4 of 94 security vendors. The domain appears on a single public blocklist and has been flagged by PhishDestroy as a fake exchange. HTTP response code is 200, suggesting the page is actively serving content. What remains uncertain is the exact content and functionality of the site, as no visual inspection is available. Defenders should block the domain at DNS and proxy layers, monitor outbound connections to the associated IP, and add the domain to internal threat intelligence feeds. Ongoing observation is advised to capture any shifts in hosting or malicious payload deployment.