osak[.]sushi[.]baby

The domain osak.sushi.baby was a cryptocurrency phishing site engaged in brand impersonation targeting SushiSwap users. It presented itself as an official SushiSwap interface to deceive victims into connecting wallets, potentially leading to unauthorized transactions or fund theft. No drainer kit was identified, but the site operated as a scam under the guise of the legitimate decentralized exchange. As of the latest verification, osak.sushi.baby has been taken offline.

Technical indicators confirm the elevated risk posed by osak.sushi.baby. The domain was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and Fortinet. It appeared on 1 security blocklist (PhishDestroy) and was registered through Dynadot LLC on August 14, 2025. The site resolved to IP address 104.21.8.146, hosted by Cloudflare in the US (AS13335), with no SSL certificate issued. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The observed page title was 'Just a moment...', and Gridinsoft assigned a trust score of 0/100.

Individuals who interacted with osak.sushi.baby should immediately revoke any token approvals granted to unknown contracts using a tool like Etherscan or Revoke.cash. Transfer remaining funds to a new wallet and monitor transaction history for unauthorized activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts. Enable two-factor authentication on all accounts and remain vigilant for follow-up phishing attempts via email or social media.