soso-sushi[.]top

The domain soso-sushi.top is identified as a phishing site involved in brand impersonation, specifically targeting the cryptocurrency platform SushiSwap. This site has been taken offline, which reduces its immediate threat level. However, it previously posed an elevated risk by attempting to deceive users into believing they were interacting with the legitimate SushiSwap platform.

Technical analysis of soso-sushi.top reveals that it was detected by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, CyRadar, and Fortinet. The domain resolves to the IP address 188.114.96.3, located in the US under AS13335 Cloudflare, Inc. It is listed on four security blocklists, namely PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain does not have an SSL certificate, and its nameservers are celeste.ns.cloudflare.com and kareem.ns.cloudflare.com.

To ensure safety, individuals who may have interacted with soso-sushi.top should take immediate action. Since this domain was involved in cryptocurrency phishing, users should revoke any token approvals and transfer funds to a secure wallet. Additionally, monitoring accounts for unauthorized transactions is advised. If personal credentials were entered, changing passwords and enabling two-factor authentication is recommended. Suspected phishing sites can be reported to authorities or platforms like Google Safe Browsing for further action.