haedal[.]sushi[.]us[.]com

The domain haedal.sushi.us.com is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It poses as a legitimate SushiSwap interface to deceive victims into interacting with fraudulent cryptocurrency transactions. No drainer kit was identified, but the site was actively used for cryptocurrency scams before being taken offline.

Technical indicators show haedal.sushi.us.com had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not detect any threats. The domain was registered through Cloudflare, Inc. and resolved to the IP address 104.21.81.20, hosted on Cloudflare's network (AS13335) in the US. It appeared on 1 security blocklist, specifically PhishDestroy. No SSL certificate was present, and the observed page title was 'Just a moment...'. Nameservers were not found, and the creation date was unavailable.

Users who interacted with haedal.sushi.us.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the domain to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (SushiSwap) to aid in takedown efforts and prevent further victimization.