hunt-sushi[.]xyz

The domain hunt-sushi.xyz is a confirmed phishing site engaged in brand impersonation targeting SushiSwap, a cryptocurrency platform. It presented itself as a legitimate SushiSwap staking portal with the page title 'Stake SUSHI | Sushi' but was designed to steal user credentials or funds through a cryptocurrency scam. No drainer kit was identified in this campaign. The site is currently taken offline, though its recent activity poses an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of hunt-sushi.xyz. The domain was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Forcepoint ThreatSeeker, and Webroot. It appears on 1 security blocklist, specifically PhishDestroy, though it was not flagged by Google Safe Browsing. Registered through NameSilo, LLC on June 22, 2025, the domain used an SSL certificate issued by R10. The page title observed during analysis was 'Stake SUSHI | Sushi', reinforcing its attempt to mimic SushiSwap’s branding. No IP address or nameserver details are available for further attribution.

Users who visited hunt-sushi.xyz should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication where available. Report the domain to platforms like PhishTank or the Anti-Phishing Working Group to aid in broader takedown efforts. Monitor accounts for suspicious transactions and remain vigilant for follow-up phishing attempts.