virtual[.]sushiswap[.]tech

The domain virtual.sushiswap.tech is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate SushiSwap service, posing an elevated risk of cryptocurrency scams. As of the latest verification, virtual.sushiswap.tech has been taken offline, but it previously operated as an active threat.

Technical indicators confirm the malicious nature of virtual.sushiswap.tech. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Gridinsoft, which assigned it a trust score of 0/100. It appeared on 1 security blocklist, specifically PhishDestroy, and was registered through Dynadot LLC on September 16, 2025. The domain resolved to the IP address 172.67.153.21, hosted by Cloudflare in the US (AS13335), and used nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No SSL certificate was observed, and the page title displayed 'Just a moment...' during active monitoring.

Users who interacted with virtual.sushiswap.tech should take immediate action to secure their assets. Revoke any token approvals granted to the domain via tools like Etherscan or Revoke.cash, and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords on the legitimate SushiSwap platform and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.