rz[.]sushiswap[.]it[.]com

rz.sushiswap.it.com is a phishing domain engaged in brand impersonation of the decentralized exchange SushiSwap, specifically targeting cryptocurrency users with a scam designed to steal funds. The domain is currently under investigation and has been taken offline, but it posed a risk by mimicking the legitimate SushiSwap platform to trick visitors into connecting their wallets or providing sensitive information. No drainer kit was identified on this domain, but the threat remains significant due to its association with cryptocurrency theft.

Technical indicators for rz.sushiswap.it.com include a VirusTotal detection rate of 0 of 95 vendors, meaning no security vendors flagged it as malicious at the time of analysis. Google Safe Browsing did not flag the domain, and it appears on only 1 security blocklist (PhishDestroy). The domain was registered through UK Intis Telecom Ltd and created on October 23, 1992, resolving to IP address 188.114.97.3, which is located in the US and hosted by AS13395 Cloudflare, Inc. The page title observed was 'Just a moment...', and no SSL certificate was issued. The Gridinsoft trust score is 0 out of 100, indicating high risk.

To stay safe from this phishing domain rz.sushiswap.it.com, users should revoke any token approvals granted to the site if they connected a wallet, and immediately move funds to a new, secure wallet. Since the scam targets cryptocurrency credentials, change passwords for any accounts used on the site and enable two-factor authentication (2FA) on all crypto-related services. Monitor for unauthorized transactions and report the domain to PhishDestroy or other security platforms to help protect others.