agt-sushi[.]xyz

The domain agt-sushi.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency exchange platform. This scam operates as a cryptocurrency phishing scheme, attempting to deceive users into divulging sensitive information or interacting with malicious smart contracts. As of the latest verification, agt-sushi.xyz has been taken offline, though it previously posed an elevated risk to users unfamiliar with the legitimate SushiSwap brand.

Technical analysis reveals that agt-sushi.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, with a Gridinsoft trust score of 0 out of 100. The domain was registered through Namecheap on August 18, 2025, and resolved to the IP address 104.21.8.140, hosted by Cloudflare, Inc. in the United States. It appeared on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The SSL certificate was issued by WE1, and the observed page title was 'Nur einen Moment…'. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with agt-sushi.xyz should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the platform’s official abuse channels, to aid in mitigation efforts.