Legitimate Project: SushiSwap (https://sushi.com/)
Malicious Domain: v3-sushi.org
Target URLs:
https://v3-sushi.org
https://v3-sushi.org/ethereum/swap
Summary & Threat Details
Brand Impersonation: The domain v3-sushi.org illegally uses the "Sushi" trademark and "v3" interface to fake the official SushiSwap DEX platform.
Web3 Drainer: The page /ethereum/swap mimics a standard swap interface. Upon connecting a crypto wallet (e.g., MetaMask, Trust Wallet), it prompts the user to sign malicious approval signatures (Permit / SetApprovalForAll), enabling total drain of ERC-20 tokens and ETH from the connected wallet.
Infrastructure Info
Domain: v3-sushi.org
TLD Registry: PIR (abuse@pir.org)
Security Action Required: Suspension of domain delegation and blacklisting across Web3 security extensions.

Legitimate Project: SushiSwap (https://sushi.com/)
Malicious Domain: v3-sushi.org
Target URLs:
https://v3-sushi.org
https://v3-sushi.org/ethereum/swap
Summary & Threat Details
Brand Impersonation: The domain v3-sushi.org illegally uses the "Sushi" trademark and "v3" interface to fake the official SushiSwap DEX platform.
Web3 Drainer: The page /ethereum/swap mimics a standard swap interface. Upon connecting a crypto wallet (e.g., MetaMask, Trust Wallet), it prompts the user to sign malicious approval signatures (Permit / SetApprovalForAll), enabling total drain of ERC-20 tokens and ETH from the connected wallet.
Infrastructure Info
Domain: v3-sushi.org
TLD Registry: PIR (abuse@pir.org)
Security Action Required: Suspension of domain delegation and blacklisting across Web3 security extensions.