sushiswop[.]at

This domain, sushiswop.at, is actively engaged in a crypto drainer scam designed to deceive users of the legitimate SushiSwap decentralized exchange platform. Crypto drainers are malicious scripts that automatically transfer cryptocurrency from a victim's wallet to an attacker-controlled address without consent. The site mimics the official SushiSwap interface, using an identical page title, 'SushiSwap | Multichain DEX on 40+ Networks — Swap, Earn, Cross-Chain,' to trick users into connecting their wallets. Once connected, the embedded malicious code executes unauthorized transactions, draining funds irreversibly. Analysis indicates that sushiswop.at is flagged by 2 out of 95 security vendors on VirusTotal, a relatively low detection rate that underscores the sophistication of the campaign. The domain was registered through Hosting Concepts B.V. (Registrar.eu), a registrar frequently utilized in phishing operations targeting financial and DeFi platforms. Infrastructure analysis reveals the domain resolves to the IP address 209.74.82.247, which has been associated with prior malicious activity. Additionally, the domain appears in one threat intelligence pulse on AlienVault OTX, further corroborating its involvement in coordinated phishing efforts. Users who have visited sushiswop.at and connected their cryptocurrency wallet should assume their funds are at immediate risk. Disconnect the wallet from all decentralized applications (dApps) via the wallet settings and revoke any suspicious smart contract approvals using a blockchain explorer or dedicated revocation tool. Monitor the wallet for unauthorized transactions and transfer remaining assets to a new, secure wallet. Report the incident to relevant blockchain security platforms and consider notifying local cybercrime authorities. Always verify domain authenticity by cross-referencing official project communications and using bookmarked links to access DeFi platforms.