etherfi[.]sushi[.]us[.]com

The domain etherfi.sushi.us.com is a phishing site involved in brand impersonation targeting the SushiSwap cryptocurrency platform. It posed a scam threat by mimicking SushiSwap to deceive users, but the site is currently taken offline. No drainer kits were identified in connection with this domain, indicating the threat primarily involved phishing rather than automated fund theft. Users searching whether etherfi.sushi.us.com is safe or a scam should consider that it was flagged for brand impersonation and is no longer active.

Technical analysis of etherfi.sushi.us.com shows it was registered through Cloudflare, Inc. and resolved to the IP address 172.67.137.128, located in the US under AS13335 Cloudflare, Inc. The domain was listed on one security blocklist, PhishDestroy, but was not flagged by Google Safe Browsing or any of the 95 VirusTotal vendors tested. No SSL certificate was present, and nameservers were not found. The page title observed during operation was 'Just a moment...'. The creation date of this domain is not available.

To protect against threats like etherfi.sushi.us.com, users should remain vigilant against brand impersonation phishing scams targeting cryptocurrency platforms such as SushiSwap. If users interacted with this or similar phishing sites, they should change their passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. Because no drainer kit was identified, revoking token approvals may not be necessary, but users should exercise caution. Suspected phishing attempts can be reported to security blocklists like PhishDestroy and to the legitimate brand’s official support channels.