alcxsushi[.]top

PhishDestroy identifies alcxsushi.top as a high-risk brand impersonation domain specifically targeting SushiSwap, a popular decentralized exchange. The threat type is brand impersonation, and the domain has been taken down, but its previous activity posed serious risks to users seeking to connect their wallets or access SushiSwap services. This domain was created on May 18, 2026, through Dynadot LLC, a registrar often used for low-quality or malicious registrations. It resolves to IP address 104.21.44.209, which is associated with Cloudflare, providing a layer of anonymity for the scam operators.

Technical indicators are alarming: VirusTotal flagged the domain with 3 out of 95 security vendors, and Google Safe Browsing explicitly marked it as phishing. The page title displayed was 'Google,' a common tactic to evade detection by showing a benign title while the actual malicious content loads via scripts. The domain appears on 3 security blocklists and was found in 1 threat intelligence pulse on AlienVault OTX, indicating active monitoring by security researchers. The SSL certificate was issued by Let's Encrypt, which is free and easily obtained, offering no trust guarantee. These factors combined confirm that alcxsushi.top was a sophisticated phishing site designed to steal cryptocurrency credentials and funds from SushiSwap users.

Although the domain is currently taken down, users should remain vigilant. PhishDestroy recommends never visiting similar domains, especially those with slight misspellings or unusual top-level domains. Always verify the official SushiSwap URL (sushi.com) and use bookmarks or hardware wallets to avoid phishing attempts. If you have already interacted with this domain, immediately revoke any wallet permissions, change passwords, and contact SushiSwap support or a cybersecurity professional. Stay safe by double-checking URLs and using anti-phishing tools.