sushi-eth[.]xyz

The domain sushi-eth.xyz was registered on 21 February 2026 and currently resolves to the IP address 107.172.83.150, which is hosted by AS36352 (HostPapa) in the United States. The site was observed presenting the page title “Stake SUSHI | Sushi”, a phrasing that aligns with the brand SushiSwap, and the intelligence set classifies the activity as a crypto‑scam impersonating that service. The domain appears on one public security blocklist and is listed as blocked by the PhishDestroy feed, indicating that at least one anti‑phishing provider has taken it down. VirusTotal analysis shows that 11 out of 95 scanning engines flagged the domain, reinforcing the malicious assessment.

Reputation services give the domain extremely low scores: Scamadviser rates it 1 out of 100 and Gridinsoft rates it 0 out of 100, both of which denote a high probability of fraud. The SSL certificate is identified as “R11”, a rating that typically reflects a weak or untrusted certificate. The site has been taken offline, and the current status is reported as offline. Based on the available evidence, the primary confidence factors are the brand‑impersonation page title, the low reputation scores, the blocklist inclusion, and the multiple VirusTotal detections.

No further technical artefacts such as specific phishing kits, JavaScript payloads, or credential‑harvesting forms have been disclosed, so the exact user‑interaction flow remains unknown. Defenders should continue to block the domain at network perimeters, update URL filtering lists with the observed indicator, and monitor the hosting provider’s IP range for any re‑use of the address in future campaigns. Continuous re‑scanning of the domain, if it reappears, is recommended to capture any evolving payloads or additional detection signatures.