polkastarter[.]sushi[.]baby

The domain polkastarter.sushi.baby is a phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency exchange. It was designed to deceive users into believing they were interacting with a legitimate SushiSwap-related service, specifically within the cryptocurrency ecosystem. As of the latest verification, polkastarter.sushi.baby has been taken offline, though it previously posed an elevated risk of financial scams or credential theft.

Technical indicators confirm the malicious nature of polkastarter.sushi.baby. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and Fortinet. It appeared on one security blocklist, PhishDestroy, and was registered through Dynadot LLC on August 14, 2025. The domain resolved to the IP address 172.67.188.138, hosted by Cloudflare in the US, and had no SSL certificate. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and the observed page title was 'Just a moment...'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with polkastarter.sushi.baby should take immediate safety steps. If cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new wallet to prevent unauthorized access. Monitor accounts for suspicious activity and enable two-factor authentication (2FA) on all related services. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (SushiSwap) to aid in mitigation efforts.