fet[.]sushi[.]baby

The domain fet.sushi.baby is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It was designed to deceive victims through a cryptocurrency scam, though no drainer kit was identified. As of the latest verification, fet.sushi.baby has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of fet.sushi.baby. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and Fortinet. It appeared on 1 security blocklist (PhishDestroy) and was registered through Dynadot LLC on August 14, 2025. The site resolved to the IP address 172.67.188.138, hosted by Cloudflare in the US (AS13335), with nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No SSL certificate was present, and the observed page title was 'Just a moment...'. Gridinsoft assigned a trust score of 0/100, further indicating its fraudulent intent.

Users who visited fet.sushi.baby should take immediate action to secure their assets. Revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the impersonated brand’s security team, to assist in mitigating further threats.