sushi-swap[.]io

The domain sushi-swap.io is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency exchange platform. It presents itself as the legitimate SushiSwap service to deceive users into interacting with fraudulent smart contracts or disclosing sensitive credentials, aligning with common cryptocurrency scam tactics. No drainer kit has been identified at this time. The site is currently taken offline, but prior activity remains under investigation.

Technical indicators show sushi-swap.io was registered through NameSilo, LLC on July 23, 2025, and resolves to the IP address 142.250.185.196, hosted on Google LLC infrastructure in the US. As of analysis, 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing has not issued any warnings. However, it appears on two security blocklists: PhishDestroy and ScamSniffer. The domain lacks an SSL certificate, and the observed page title was 'Google'. Nameservers are hosted under Cloudflare: harlee.ns.cloudflare.com and watson.ns.cloudflare.com.

Users who interacted with sushi-swap.io should immediately revoke any token approvals granted to unknown contracts using a tool like Revoke.cash or Etherscan. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Enable two-factor authentication on all cryptocurrency accounts and change passwords if credentials were entered. Report the phishing domain to the impersonated brand via SushiSwap’s official security channels, and submit the URL to platforms such as Google Safe Browsing, PhishTank, or ScamAdviser to aid in broader detection efforts.