chaingpt[.]sushiswap[.]buzz

The domain chaingpt.sushiswap.buzz is associated with a brand impersonation phishing scam targeting the SushiSwap brand. This domain was used to deceive users into believing it was affiliated with the legitimate SushiSwap platform. The threat level is considered elevated due to its potential impact on users involved in cryptocurrency transactions. The domain is currently offline, reducing the immediate risk, but users who interacted with it may still be at risk.

Several technical indicators highlight the malicious nature of chaingpt.sushiswap.buzz. It was detected by 2 of 95 security vendors on VirusTotal, specifically flagged by Fortinet and Trustwave. The domain was registered through Dynadot LLC on September 16, 2025, and resolves to the IP address 104.21.51.204, located in the United States under AS13335 Cloudflare, Inc. This domain appears on one security blocklist, specifically PhishDestroy. The SSL certificate was not available, and the site had a page title of 'Just a moment...'.

Users who may have interacted with chaingpt.sushiswap.buzz should take immediate safety measures. If cryptocurrency transactions were involved, it is crucial to revoke any token approvals and transfer funds to a new wallet to prevent unauthorized access. In cases of credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for suspicious activity. To report such phishing incidents, users can contact relevant cybersecurity authorities or use platforms like PhishDestroy to aid in taking down similar threats.