kekec-sushi[.]fit

The domain kekec-sushi.fit is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It was designed to deceive victims into believing they were interacting with the legitimate SushiSwap service, posing an elevated risk of cryptocurrency scams. As of the latest verification, kekec-sushi.fit has been taken offline, though its prior activity remains a concern for those who may have visited it.

Technical analysis of kekec-sushi.fit reveals limited but notable detection. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Fortinet, and appeared on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was registered through NameCheap, Inc. on August 30, 2025, and resolved to the IPv6 address 2606:4700:3030::6815:2001, hosted by Cloudflare, Inc. in the US. No SSL certificate was issued for the domain, and its nameservers were celeste.ns.cloudflare.com and kareem.ns.cloudflare.com. The observed page title was 'Un instant…', a placeholder commonly associated with temporary or cloaked content.

Users who interacted with kekec-sushi.fit should take immediate steps to secure their assets. Since this was a cryptocurrency scam, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in broader mitigation efforts.