kekius[.]sushiswap[.]tech

The domain kekius.sushiswap.tech is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It poses an elevated risk as a cryptocurrency scam, designed to deceive victims into believing they are interacting with the legitimate SushiSwap service. No drainer kit was identified in this campaign. As of the latest verification, kekius.sushiswap.tech has been taken offline.

Technical indicators confirm the malicious nature of kekius.sushiswap.tech. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Gridinsoft, and appears on 1 security blocklist (PhishDestroy). It was registered through Dynadot LLC on 2025-09-16 06:05:08 and resolves to the IP address 172.67.153.21, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued for the domain, and the observed page title was 'Just a moment...'. Nameservers for kekius.sushiswap.tech are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who interacted with kekius.sushiswap.tech should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to the legitimate service (SushiSwap) and consider submitting it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.