sushi-tel[.]top

The domain sushi-tel.top was identified as a brand impersonation threat specifically targeting SushiSwap, a popular decentralized finance platform. Classified with an elevated risk level, this domain is currently offline, but its presence posed a significant risk to users seeking to stake SUSHI tokens. The page title 'Stake SUSHI | Sushi' was designed to deceive visitors into believing they were interacting with the legitimate SushiSwap protocol.

Technical indicators from the investigation reveal that the domain was created on February 21, 2026, and resolved to IP address 107.172.83.150. VirusTotal flagged the domain with 1 out of 95 security vendors, indicating some detection but not widespread recognition. It appeared on 4 security blocklists, and its SSL certificate was issued by R11, which is not a standard trusted certificate authority. These findings suggest a targeted phishing operation aimed at stealing user credentials or funds.

Given that the domain has been taken offline, the immediate threat is mitigated. However, users should remain vigilant and verify URLs carefully before interacting with any SushiSwap-related sites. PhishDestroy recommends always using official links from the SushiSwap website or trusted sources, enabling two-factor authentication, and reporting any suspicious domains to security teams. Continued monitoring for similar impersonation domains is advised.