cswap[.]sushiswap[.]tech

The domain cswap.sushiswap.tech is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It poses an elevated risk as a cryptocurrency scam designed to deceive victims into interacting with fraudulent smart contracts or disclosing sensitive wallet information. No drainer kit was identified, but the site was actively impersonating SushiSwap’s branding and services. As of the latest verification, cswap.sushiswap.tech has been taken offline.

Technical indicators confirm the malicious nature of cswap.sushiswap.tech. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Gridinsoft, which assigned it a trust score of 0 out of 100. It appeared on one security blocklist, PhishDestroy, and was registered through Dynadot LLC on September 16, 2025. The domain resolved to the IP address 172.67.153.21, hosted on Cloudflare’s network (AS13335) in the United States. No SSL certificate was available, and the observed page title was 'Just a moment...'. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who interacted with cswap.sushiswap.tech should immediately revoke any token approvals granted to unknown contracts using a tool such as Revoke.cash or Etherscan’s token approval checker. Funds should be transferred to a new, secure wallet to prevent unauthorized access. If credentials or private keys were entered, users must assume compromise and monitor accounts for suspicious transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels to aid in takedown efforts.