red-sushi[.]xyz

Analysis of red-sushi.xyz indicates a crypto scam domain impersonating SushiSwap, a decentralized finance platform. The domain was registered on February 21, 2026, and resolved to IP 107.172.83.150, hosted on AS36352 (HostPapa) in the United States. At the time of assessment, the domain was offline, though it previously displayed the page title 'Stake SUSHI | Sushi,' suggesting an attempt to mimic SushiSwap’s staking interface.

Five of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on two security blocklists: PhishDestroy and ScamSniffer. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as a high-risk domain. The SSL certificate is issued by R10, a low-assurance certificate authority often associated with short-lived phishing infrastructure.

While the exact content of the site remains unconfirmed due to its offline status, the combination of brand impersonation, crypto-themed page title, and detection by multiple security vendors supports its classification as a crypto scam. Defenders should treat this domain as malicious and block it at the network level. If the domain reactivates, further analysis of its hosting infrastructure and any associated cryptocurrency addresses is recommended to identify potential wallet-draining or credential-harvesting activity.