axs[.]sushiswap[.]tech

The domain axs.sushiswap.tech is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. This scam site was designed to deceive victims into believing they were interacting with the legitimate SushiSwap service, likely aiming to steal cryptocurrency or sensitive login credentials. No drainer kit was identified in this campaign. The site is currently taken offline, but users who may have interacted with axs.sushiswap.tech should remain cautious.

Technical indicators confirm the malicious nature of axs.sushiswap.tech. The domain was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist, specifically PhishDestroy. Registered through Dynadot LLC on September 16, 2025, the domain resolves to the IP address 172.67.153.21, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'Just a moment...'. Nameservers for the domain are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who visited axs.sushiswap.tech should take immediate safety steps. If cryptocurrency transactions were attempted, revoke any token approvals and transfer remaining funds to a new wallet. For those who entered login credentials, change passwords immediately and enable two-factor authentication on all related accounts. Monitor accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team. Reporting helps prevent further victimization.