m[.]sushiswap[.]buzz

The domain m.sushiswap.buzz is a cryptocurrency phishing site engaged in brand impersonation targeting SushiSwap users. It presents itself as a legitimate SushiSwap interface but is designed to steal credentials or funds through fraudulent transactions. No drainer kit has been identified, and the site is currently taken offline, though it previously posed a risk of financial theft under the guise of the SushiSwap brand.

Technical indicators show m.sushiswap.buzz was registered through Dynadot LLC on 2025-09-16 06:05:07 and resolved to the IP address 172.67.185.223, hosted on Cloudflare’s network (AS13335). At the time of assessment, 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing had not listed it as malicious. However, it appeared on 1 security blocklist (PhishDestroy). The domain lacked an SSL certificate, and the observed page title was 'Just a moment...'. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who interacted with m.sushiswap.buzz should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the domain to the impersonated brand’s security team and submit it to platforms like PhishTank or Google Safe Browsing to prevent further abuse.