btcbull[.]sushiswap[.]it[.]com

The domain btcbull.sushiswap.it.com is a brand impersonation phishing site specifically targeting users of the decentralized exchange SushiSwap. It poses as a legitimate SushiSwap-related platform to deceive visitors into connecting their cryptocurrency wallets or entering sensitive information, potentially leading to asset theft. The site is currently taken offline, but its risk level remains under investigation due to its malicious intent and design.

Technical analysis reveals that btcbull.sushiswap.it.com has 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing does not mark it as dangerous. It appears on 1 security blocklist (PhishDestroy). The domain is registered through UK Intis Telecom Ltd and was created on October 23, 1992. It resolves to IP address 188.114.97.3, located in the US and hosted by AS13335 Cloudflare, Inc. The page title observed was 'Just a moment...', and no SSL certificate is available. The Gridinsoft trust score is 0/100, indicating high risk.

Users who interacted with btcbull.sushiswap.it.com should take immediate safety steps. Since this is a cryptocurrency phishing site, victims should revoke any token approvals granted to the site using a blockchain explorer or revoke tool, and move their funds to a new, secure wallet. Monitor for unauthorized transactions and report the domain to PhishDestroy and other security platforms. If credentials were entered, change passwords on all related accounts and enable two-factor authentication.