sushi-manyu[.]xyz

Analysis of sushi-manyu.xyz, observed as offline as of the report date July 22, 2026, indicates a high‑risk brand‑impersonation campaign targeting SushiSwap users. The domain was registered on February 21, 2026 and resolves to the IP address 107.172.83.150, which is hosted in the United States under ASN 36352 operated by HostPapa. The site presented the page title "恭喜，站点创建成功！" ("Congratulations, site created successfully!") but no further content has been captured. Security instrumentation assigns a Gridinsoft trust score of 0 out of 100 and the SSL certificate is rated R10, suggesting poor cryptographic hygiene.

The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal analysis shows that 2 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The campaign is classified as a crypto scam, leveraging the SushiSwap brand to lure victims.

Defenders should block traffic to 107.172.83.150 at the network perimeter, add sushi-manyu.xyz to host‑based deny lists, and monitor for any related command‑and‑control or credential‑harvesting activity. Because the site is currently offline, further forensic capture of the payload is not possible, leaving the exact phishing mechanics uncertain. Continuous observation of the hosting provider and registrar for new domains employing similar naming patterns is recommended to pre‑empt future impersonation attempts.