sushi-m87[.]top

The domain sushi-m87.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a decentralized cryptocurrency exchange. It presents itself as a legitimate staking platform for SUSHI tokens but is designed to deceive users into disclosing sensitive information or transferring funds to attacker-controlled wallets. This site does not employ a known crypto drainer kit but operates as a cryptocurrency scam. As of the latest verification, sushi-m87.top has been taken offline, though users who interacted with it may remain at risk.

Technical analysis reveals that sushi-m87.top was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Trustwave. The domain was not listed by Google Safe Browsing but appeared on one security blocklist, PhishDestroy. It was registered on February 21, 2026, and resolved to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the United States. The SSL certificate was issued by R11, and the observed page title was 'Stake SUSHI | Sushi'. No registrar information is currently available for this domain.

Users who visited sushi-m87.top should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to relevant platforms, including the impersonated brand (SushiSwap), blockchain security teams, and local cybercrime authorities. Additionally, victims may submit the domain to threat intelligence feeds such as PhishTank or URLVoid to assist in broader detection efforts.