sushi-shib[.]cc

The domain sushi-shib.cc is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform SushiSwap. It presents itself as a legitimate staking portal for SUSHI tokens but is designed to deceive victims into disclosing sensitive information or transferring funds under false pretenses. This scam operates as a cryptocurrency phishing scheme, though no specific drainer kit has been identified. As of the latest verification, sushi-shib.cc has been taken offline.

Technical indicators confirm the malicious nature of sushi-shib.cc. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker, while Google Safe Browsing did not detect it. It appears on one security blocklist, PhishDestroy, and holds a Gridinsoft trust score of 0 out of 100. Registered through NameSilo, LLC on August 11, 2025, the domain resolves to the IP address 107.172.83.150, hosted by AS36352 (HostPapa) in the US. The SSL certificate is issued by R11, and the observed page title was 'Stake SUSHI | Sushi'.

Users who interacted with sushi-shib.cc should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts to prevent unauthorized access. Monitor accounts for suspicious transactions and report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.