polkastarter[.]sushi[.]us[.]com

The domain polkastarter.sushi.us.com is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. This scam site was designed to deceive users into believing they were interacting with the legitimate SushiSwap platform, likely to steal cryptocurrency or sensitive login credentials. As of the latest verification, polkastarter.sushi.us.com has been taken offline, though its prior activity classifies it as a cryptocurrency-related threat.

Technical analysis of polkastarter.sushi.us.com reveals limited detection at the time of investigation. The domain registered 0 of 95 detections on VirusTotal, was not flagged by Google Safe Browsing, and appeared on only 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc., resolved to the IP address 104.21.81.20 (hosted by Cloudflare in the US), and had no SSL certificate issued. The observed page title was 'Just a moment...', and no nameservers were found. The domain impersonated SushiSwap but did not deploy a known drainer kit.

Users who may have interacted with polkastarter.sushi.us.com should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. If login credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to platforms like PhishTank or the Anti-Phishing Working Group to aid in broader takedown efforts. Monitor accounts for unauthorized transactions and remain vigilant for further phishing attempts.