tree-sushi[.]top

The domain tree-sushi.top is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate SushiSwap service, posing an elevated risk of cryptocurrency theft. As of the latest verification, tree-sushi.top has been taken offline, though it previously operated without a known drainer kit.

Technical indicators confirm the malicious nature of tree-sushi.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Trustwave, with a Gridinsoft trust score of 0/100. It appears on 4 security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through NameCheap, Inc. on August 30, 2025, the domain resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'Nur einen Moment…'. Nameservers were celeste.ns.cloudflare.com and kareem.ns.cloudflare.com.

Users who interacted with tree-sushi.top should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts as an additional security measure. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, and the impersonated brand (SushiSwap), to assist in mitigating further threats.