spark[.]sushi[.]us[.]com

The domain spark.sushi.us.com is a cryptocurrency phishing site engaged in brand impersonation targeting SushiSwap, a decentralized exchange. This scam attempts to deceive users into interacting with fraudulent interfaces, potentially leading to unauthorized access to crypto wallets or credential theft. No drainer kit has been identified, and the site is currently taken offline, though its prior activity remains a risk to those who may have engaged with it.

Technical indicators show spark.sushi.us.com has 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing has not flagged the domain. It appears on 1 security blocklist (PhishDestroy) and is registered through Cloudflare, Inc. The domain resolves to the IP address 104.21.81.20, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate is present, and the observed page title was 'Just a moment...'. Nameservers are not found, and the creation date is unavailable.

Users who interacted with spark.sushi.us.com should immediately revoke any token approvals granted to unknown contracts using a tool like Etherscan's token approval checker. Move funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed while on the site and enable two-factor authentication (2FA). Report the domain to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (SushiSwap) to aid in takedown efforts.