sushi-virtual[.]xyz

Analysis of sushi-virtual.xyz indicates this domain was created on February 21, 2026, and is currently offline as of the report date. The domain impersonates SushiSwap, a known decentralized finance platform, and is classified as a crypto scam. It appears on one security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, signaling high risk. Two of 95 security vendors on VirusTotal flagged the domain, though the specific detection context is not detailed.

The domain resolved to IP 107.172.83.150, hosted on AS36352 (HostPapa) in the US, with an SSL certificate issued by R10. The only visible page content was a generic success message in Chinese: '恭喜，站点创建成功！', which does not confirm the exact scam mechanics but aligns with common placeholder behavior for newly registered malicious domains. No evidence of a phishing kit or further page analysis is available.

Defenders should treat this domain as confirmed malicious infrastructure targeting SushiSwap users. Recommended actions include blocking the domain and IP at perimeter defenses, monitoring for related subdomains or newly registered lookalikes, and alerting users to potential crypto wallet or credential theft attempts linked to this domain. Given its offline status, defenders should also investigate whether the infrastructure has shifted to alternative domains or IPs.