avax[.]sushiswap[.]tech

The domain avax.sushiswap.tech is associated with a brand impersonation phishing threat targeting the cryptocurrency platform SushiSwap. This domain was used to deceive users by mimicking the legitimate brand to potentially conduct fraudulent activities. Currently, the site is taken offline, reducing its immediate threat level, but the risk remains elevated due to its previous activity.

Technical indicators for avax.sushiswap.tech include detection by 3 of 95 vendors on VirusTotal, specifically ChainPatrol, alphaMountain.ai, and Fortinet. The domain was registered through Dynadot LLC on September 16, 2025, and resolves to the IP address 172.67.153.21, located in the US under AS13335 Cloudflare, Inc. It appears on one security blocklist, PhishDestroy. The domain lacks an SSL certificate and the page title observed was 'Just a moment...'. The nameservers associated with this domain are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

For those who may have interacted with the phishing site avax.sushiswap.tech, it is crucial to take immediate action to secure any cryptocurrency accounts. Users should revoke token approvals and transfer their funds to a new wallet to prevent unauthorized access. Additionally, if any credentials were entered, it is advised to change passwords, enable two-factor authentication, and monitor accounts for signs of fraudulent activity. To report such phishing attempts, users can contact platforms like PhishDestroy or use reporting tools provided by their security software.