kaito[.]sushi[.]us[.]com

The domain kaito.sushi.us.com is a cryptocurrency phishing site engaged in brand impersonation targeting SushiSwap users. It poses as the legitimate SushiSwap decentralized exchange to deceive victims into connecting wallets or entering credentials, potentially leading to unauthorized fund transfers. No drainer kit was identified, but the site was actively used for cryptocurrency scams. As of the latest verification, kaito.sushi.us.com has been taken offline.

Technical indicators show kaito.sushi.us.com had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not detect any threats. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Cloudflare, Inc. It resolved to the IP address 172.67.137.128, hosted by Cloudflare in the US (AS13335). No SSL certificate was available, and the observed page title was 'Just a moment...'. Nameservers were not found, and the creation date was not available.

Users who interacted with kaito.sushi.us.com should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to platforms such as PhishTank, Google Safe Browsing, or the impersonated brand’s security team to aid in takedown efforts.