sushi-apx[.]top

This domain, sushi-apx.top, is identified as a brand impersonation threat specifically targeting SushiSwap, a decentralized finance protocol. The site presents itself as a legitimate staking platform for SUSHI tokens, using the page title 'Stake SUSHI | Sushi' to deceive users into interacting with fraudulent smart contracts or disclosing wallet credentials. No direct evidence of a drainer kit is present, but the domain's infrastructure and content align with known phishing tactics used to compromise cryptocurrency assets. Infrastructure analysis reveals the domain was registered on July 05, 2025, through NameSilo, LLC, a registrar frequently associated with malicious domains. It resolves to the IP address 107.172.83.150, which has been linked to other phishing campaigns. Detection metrics indicate 7 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one additional security blocklist. The SSL certificate is issued by R11, a provider commonly used in low-reputation hosting environments. Google Safe Browsing does not currently list the domain, suggesting either recent takedown or evasion of detection. As of the latest assessment, sushi-apx.top has been taken offline, likely due to registrar intervention or hosting provider enforcement. While the immediate threat is mitigated, the domain's infrastructure remains a residual risk. Users who interacted with the site should revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the authenticity of any linked smart contracts. Organizations should update blocklists to include the domain and associated IP to prevent future access attempts.