osak[.]sushi[.]us[.]com

The domain osak.sushi.us.com is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It operates as a cryptocurrency scam designed to deceive victims into interacting with fraudulent smart contracts or revealing wallet credentials, though no specific drainer kit has been identified. As of the latest verification, osak.sushi.us.com has been taken offline, reducing immediate risk to users.

Technical analysis of osak.sushi.us.com reveals limited detection at this stage, with 0 of 95 VirusTotal vendors flagging the domain and Google Safe Browsing not listing it as malicious. The domain appears on 1 security blocklist, specifically PhishDestroy. It is registered through Cloudflare, Inc., resolves to the IP address 104.21.81.20 (hosted by Cloudflare in the US), and lacks an SSL certificate. The observed page title was 'Just a moment...', and no nameservers were found during investigation.

Users who interacted with osak.sushi.us.com should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet to prevent unauthorized access. Enable two-factor authentication on all cryptocurrency and financial accounts, and monitor for suspicious transactions. Report the phishing domain to platforms such as PhishTank, Google Safe Browsing, or the impersonated brand (SushiSwap) to aid in broader takedown efforts.