obol[.]sushiswap[.]buzz

This domain, obol.sushiswap.buzz, is flagged as a brand-impersonation threat targeting SushiSwap, a decentralized finance platform. Analysis indicates the site was designed to deceive users into entering wallet credentials or private keys by presenting a fraudulent interface resembling the legitimate SushiSwap portal. The domain's infrastructure and content were structured to exploit trust in the SushiSwap brand, potentially leading to unauthorized access to cryptocurrency wallets and financial loss for victims. Infrastructure analysis reveals the domain was registered through Dynadot LLC on September 16, 2025, and resolves to the IPv6 address 2606:4700:3036::6815:33cc. Security vendor detections on VirusTotal report 4 out of 95 engines flagging the domain as malicious, while it appears on one security blocklist. The page title 'Just a moment...' suggests the use of Cloudflare or similar proxy services to obscure the true hosting infrastructure, a common tactic in phishing operations to evade detection and takedown efforts. Users who visited obol.sushiswap.buzz should immediately revoke any wallet permissions granted during the interaction. If credentials or private keys were entered, transfer assets to a new wallet and monitor all connected accounts for unauthorized transactions. Enable multi-factor authentication on all financial and cryptocurrency platforms where possible. Report the incident to the legitimate platform's security team and consider filing a report with relevant cybercrime authorities. Regularly audit wallet permissions and review transaction histories for any signs of compromise.