towns[.]sushiswap[.]best

The domain towns.sushiswap.best imitates the cryptocurrency platform SushiSwap, aiming to deceive users into divulging sensitive information. Despite being offline now, it was an active threat when first detected. The domain was registered with Dynadot LLC and hosted on an IP associated with Cloudflare, Inc. in the US.

This phishing site was detected early by PhishDestroy, capturing it before it appeared in antivirus databases. With 0 detections on VirusTotal, the domain's freshness highlights its potential danger during the critical 24-72 hour window before AV propagation. The site was listed on one public blocklist, specifically PhishDestroy's, underscoring its rapid identification.

The scam targeted SushiSwap users, leveraging brand recognition to gain trust. The page displayed the title "Just a moment..." likely to stall users while malicious scripts executed or redirected them. The absence of an SSL certificate suggests a lower level of sophistication, but the threat remains significant due to the impersonation of a well-known cryptocurrency brand. The domain's platform risk score was relatively low at 10/100, reflecting its brief operational period before takedown.