got[.]sushiswap[.]tech

The domain got.sushiswap.tech is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It poses an elevated risk as a cryptocurrency scam designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified in this campaign. The site is currently taken offline, but users who interacted with it should remain cautious.

Technical indicators confirm the malicious nature of got.sushiswap.tech. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Gridinsoft, which assigned a trust score of 0/100. It appears on one security blocklist, PhishDestroy. Registered through Dynadot LLC on September 16, 2025, the domain resolves to IP address 172.67.153.21, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'Just a moment...'. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who visited got.sushiswap.tech should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. If login credentials were entered, change passwords for SushiSwap and any reused accounts, and enable two-factor authentication. Monitor accounts for unauthorized transactions. Report the domain to SushiSwap's official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.